(Image:\\curl.exe OR Product:The\ curl\ executable) ((CommandLine:%AppData%* OR CommandLine:%Public%* OR CommandLine:%Temp%* OR CommandLine:%tmp%* OR CommandLine:\\AppData\\* OR CommandLine:\\Desktop\\* OR CommandLine:\\Temp\\* OR CommandLine:\\Users\\Public\\* OR CommandLine:C\:\\PerfLogs\\* OR CommandLine:C\:\\ProgramData\\* OR CommandLine:C\:\\Windows\\Temp\\*) OR (CommandLine:.dll OR CommandLine:.gif OR CommandLine:.jpeg OR CommandLine:.jpg OR CommandLine:.png OR CommandLine:.temp OR CommandLine:.tmp OR CommandLine:.txt OR CommandLine:.vbe OR CommandLine:.vbs)) (-(ParentImage:C\:\\Program\ Files\\Git\\usr\\bin\\sh.exe Image:C\:\\Program\ Files\\Git\\mingw64\\bin\\curl.exe (CommandLine:\-\-silent\ \-\-show\-error\ \-\-output\ * CommandLine:gfw\-httpget\-* CommandLine:AppData*)))