(Image:\\wbadmin.exe OR OriginalFileName:WBADMIN.EXE) (CommandLine:\ recovery* CommandLine:recoveryTarget* CommandLine:itemtype\:File*)