((Image:\\livekd.exe OR Image:\\livekd64.exe) OR OriginalFileName:livekd.exe) (CommandLine:\ \-m* OR CommandLine:\ \/m* OR CommandLine:\ –m* OR CommandLine:\ —m* OR CommandLine:\ ―m*)