(Image:\\curl.exe OR OriginalFileName:curl.exe) CommandLine:\-\-ntlm* CommandLine:(?i)\\s(-u|--user)\\s*: