((Image:\\wmic.exe OR OriginalFileName:wmic.exe OR (Hashes:IMPHASH=1B1A3F43BF37B5BFE60751F2EE2F326E* OR Hashes:IMPHASH=37777A96245A3C74EB217308F3546F4C* OR Hashes:IMPHASH=9D87C9D67CE724033C0B40CC4CA1B206* OR Hashes:IMPHASH=B12619881D79C3ACADF45E752A58554A* OR Hashes:IMPHASH=16A48C3CABF98A9DC1BF02C07FE1EA00*)) (CommandLine:\-format\:* OR CommandLine:\/format\:* OR CommandLine:–format\:* OR CommandLine:—format\:* OR CommandLine:―format\:*)) (-((CommandLine:Format\:List* OR CommandLine:Format\:htable* OR CommandLine:Format\:hform* OR CommandLine:Format\:table* OR CommandLine:Format\:mof* OR CommandLine:Format\:value* OR CommandLine:Format\:rawxml* OR CommandLine:Format\:xml* OR CommandLine:Format\:csv*) OR (CommandLine:\:\/\/* OR CommandLine:\\\\*)))