((Image:\\WMIC.exe OR OriginalFileName:wmic.exe) (CommandLine:\-node\:* OR CommandLine:\/node\:* OR CommandLine:–node\:* OR CommandLine:—node\:* OR CommandLine:―node\:*)) (-(CommandLine:localhost* OR CommandLine:127.0.0.1*))