(Image:\\wmic.exe OR OriginalFileName:wmic.exe OR (Hashes:IMPHASH=1B1A3F43BF37B5BFE60751F2EE2F326E* OR Hashes:IMPHASH=37777A96245A3C74EB217308F3546F4C* OR Hashes:IMPHASH=9D87C9D67CE724033C0B40CC4CA1B206* OR Hashes:IMPHASH=B12619881D79C3ACADF45E752A58554A* OR Hashes:IMPHASH=16A48C3CABF98A9DC1BF02C07FE1EA00*)) ((CommandLine:\-format\:* OR CommandLine:\/format\:* OR CommandLine:–format\:* OR CommandLine:—format\:* OR CommandLine:―format\:*) (CommandLine:\:\/\/* OR CommandLine:\\\\*))