(Image:\\lazagne.exe OR ((Image:\:\\PerfLogs\\* OR Image:\:\\ProgramData\\* OR Image:\:\\Temp\\* OR Image:\:\\Tmp\\* OR Image:\:\\Users\\Public\\* OR Image:\:\\Windows\\Temp\\* OR Image:\\$Recycle.bin* OR Image:\\AppData\\* OR Image:\\Desktop\\* OR Image:\\Downloads\\* OR Image:\\Favorites\\* OR Image:\\Links\\* OR Image:\\Music\\* OR Image:\\Photos\\* OR Image:\\Pictures\\* OR Image:\\Saved\ Games\\* OR Image:\\Searches\\* OR Image:\\Users\\Contacts\\* OR Image:\\Users\\Default\\* OR Image:\\Users\\Searches\\* OR Image:\\Videos\\* OR Image:\\Windows\\addins\\* OR Image:\\Windows\\Fonts\\* OR Image:\\Windows\\IME\\*) (CommandLine:.exe\ all OR CommandLine:.exe\ browsers OR CommandLine:.exe\ chats OR CommandLine:.exe\ databases OR CommandLine:.exe\ games OR CommandLine:.exe\ git OR CommandLine:.exe\ mails OR CommandLine:.exe\ maven OR CommandLine:.exe\ memory OR CommandLine:.exe\ multimedia OR CommandLine:.exe\ sysadmin OR CommandLine:.exe\ unused OR CommandLine:.exe\ wifi OR CommandLine:.exe\ windows))) OR ((CommandLine:\ all\ * OR CommandLine:\ browsers\ * OR CommandLine:\ chats\ * OR CommandLine:\ databases\ * OR CommandLine:\ games\ * OR CommandLine:\ mails\ * OR CommandLine:\ maven\ * OR CommandLine:\ memory\ * OR CommandLine:\ multimedia\ * OR CommandLine:\ php\ * OR CommandLine:\ svn\ * OR CommandLine:\ sysadmin\ * OR CommandLine:\ unused\ * OR CommandLine:\ wifi\ *) (CommandLine:\-1Password* OR CommandLine:\-apachedirectorystudio* OR CommandLine:\-autologon* OR CommandLine:\-ChromiumBased* OR CommandLine:\-coreftp* OR CommandLine:\-credfiles* OR CommandLine:\-credman* OR CommandLine:\-cyberduck* OR CommandLine:\-dbvis* OR CommandLine:\-EyeCon* OR CommandLine:\-filezilla* OR CommandLine:\-filezillaserver* OR CommandLine:\-ftpnavigator* OR CommandLine:\-galconfusion* OR CommandLine:\-gitforwindows* OR CommandLine:\-hashdump* OR CommandLine:\-iisapppool* OR CommandLine:\-IISCentralCertP* OR CommandLine:\-kalypsomedia* OR CommandLine:\-keepass* OR CommandLine:\-keepassconfig* OR CommandLine:\-lsa_secrets* OR CommandLine:\-mavenrepositories* OR CommandLine:\-memory_dump* OR CommandLine:\-Mozilla* OR CommandLine:\-mRemoteNG* OR CommandLine:\-mscache* OR CommandLine:\-opensshforwindows* OR CommandLine:\-openvpn* OR CommandLine:\-outlook* OR CommandLine:\-pidgin* OR CommandLine:\-postgresql* OR CommandLine:\-psi\-im* OR CommandLine:\-puttycm* OR CommandLine:\-pypykatz* OR CommandLine:\-Rclone* OR CommandLine:\-rdpmanager* OR CommandLine:\-robomongo* OR CommandLine:\-roguestale* OR CommandLine:\-skype* OR CommandLine:\-SQLDeveloper* OR CommandLine:\-squirrel* OR CommandLine:\-tortoise* OR CommandLine:\-turba* OR CommandLine:\-UCBrowser* OR CommandLine:\-unattended* OR CommandLine:\-vault* OR CommandLine:\-vaultfiles* OR CommandLine:\-vnc* OR CommandLine:\-winscp*))