Suspicious LOLBin Execution

Detects LOLBin executions with suspicious arguments (download, encode, decode, execute) used for defense evasion.