Image:\\iox.exe OR (CommandLine:.exe\ fwd\ \-l\ * OR CommandLine:.exe\ fwd\ \-r\ * OR CommandLine:.exe\ proxy\ \-l\ * OR CommandLine:.exe\ proxy\ \-r\ *) OR (Hashes:MD5=9DB2D314DD3F704A02051EF5EA210993* OR Hashes:SHA1=039130337E28A6623ECF9A0A3DA7D92C5964D8DD* OR Hashes:SHA256=C6CF82919B809967D9D90EA73772A8AA1C1EB3BC59252D977500F64F1A0D6731*)