(Image:\\htran.exe OR Image:\\lcx.exe) OR (CommandLine:.exe\ \-tran\ * OR CommandLine:.exe\ \-slave\ *)