(Image:\\iexpress.exe OR OriginalFileName:IEXPRESS.exe) (CommandLine:\ \-n\ * OR CommandLine:\ \/n\ * OR CommandLine:\ –n\ * OR CommandLine:\ —n\ * OR CommandLine:\ ―n\ *) (CommandLine:\:\\ProgramData\\* OR CommandLine:\:\\Temp\\* OR CommandLine:\:\\Windows\\System32\\Tasks\\* OR CommandLine:\:\\Windows\\Tasks\\* OR CommandLine:\:\\Windows\\Temp\\* OR CommandLine:\\AppData\\Local\\Temp\\*)