CommandLine:tasklist* OR Image:\\tasklist.exe OR OriginalFileName:tasklist.exe