(Image:\\certoc.exe OR OriginalFileName:CertOC.exe) (CommandLine:\ \-LoadDLL\ * OR CommandLine:\ \/LoadDLL\ * OR CommandLine:\ –LoadDLL\ * OR CommandLine:\ —LoadDLL\ * OR CommandLine:\ ―LoadDLL\ *) (CommandLine:\\Appdata\\Local\\Temp\\* OR CommandLine:\\Desktop\\* OR CommandLine:\\Downloads\\* OR CommandLine:\\Users\\Public\\* OR CommandLine:C\:\\Windows\\Tasks\\* OR CommandLine:C\:\\Windows\\Temp\\*)