(Image:\\bcdedit.exe OR Image:\\net.exe OR Image:\\net1.exe OR Image:\\netsh.exe OR Image:\\wevtutil.exe OR Image:\\vssadmin.exe) CommandLine:11111111*