(Description:7\-Zip* OR (Image:\\7z.exe OR Image:\\7zr.exe OR Image:\\7za.exe) OR (OriginalFileName:7z.exe OR OriginalFileName:7za.exe OR OriginalFileName:7zr.exe)) (CommandLine:.dmp* OR CommandLine:.dump* OR CommandLine:.hdmp*)