Image:\\xordump.exe OR (CommandLine:\ \-process\ lsass.exe\ * OR CommandLine:\ \-m\ comsvcs\ * OR CommandLine:\ \-m\ dbghelp\ * OR CommandLine:\ \-m\ dbgcore\ *)