(Image:\\cmd.exe OR OriginalFileName:Cmd.Exe) CommandLine:assoc*