(TargetFilename:\\fgdump\-log* OR TargetFilename:\\kirbi* OR TargetFilename:\\pwdump* OR TargetFilename:\\pwhashes* OR TargetFilename:\\wce_ccache* OR TargetFilename:\\wce_krbtkts*) OR (TargetFilename:\\cachedump.exe OR TargetFilename:\\cachedump64.exe OR TargetFilename:\\DumpExt.dll OR TargetFilename:\\DumpSvc.exe OR TargetFilename:\\Dumpy.exe OR TargetFilename:\\fgexec.exe OR TargetFilename:\\lsremora.dll OR TargetFilename:\\lsremora64.dll OR TargetFilename:\\NTDS.out OR TargetFilename:\\procdump.exe OR TargetFilename:\\procdump64.exe OR TargetFilename:\\procdump64a.exe OR TargetFilename:\\pstgdump.exe OR TargetFilename:\\pwdump.exe OR TargetFilename:\\SAM.out OR TargetFilename:\\SECURITY.out OR TargetFilename:\\servpw.exe OR TargetFilename:\\servpw64.exe OR TargetFilename:\\SYSTEM.out OR TargetFilename:\\test.pwd OR TargetFilename:\\wceaux.dll)