(Image:\\whoami.exe OR OriginalFileName:whoami.exe) (CommandLine:\ \-all* OR CommandLine:\ \/all* OR CommandLine:\ –all* OR CommandLine:\ —all* OR CommandLine:\ ―all*)