(Image:\\certoc.exe OR OriginalFileName:CertOC.exe) CommandLine:://[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3} CommandLine:\-GetCACAPS*