Suspicious command line tokens in LolBins or LolScripts

'This query identifies Microsoft-signed Binaries and Scripts that are not system initiated. This technique is commonly used in phishing attacks'