(CommandLine:ipconfig*|*find* OR CommandLine:net*|*find* OR CommandLine:netstat*|*find* OR CommandLine:ping*|*find* OR CommandLine:systeminfo*|*find* OR CommandLine:tasklist*|*find* OR CommandLine:whoami*|*find*) (-(CommandLine:cmd.exe\ \/c\ TASKLIST\ \/V\ |* CommandLine:FIND\ \/I* CommandLine:\\xampp\\* CommandLine:\\catalina_start.bat*))