(Image:\\attrib.exe OR OriginalFileName:ATTRIB.EXE) CommandLine:\ \+s\ *