(Image:\\ilasm.exe OR OriginalFileName:ilasm.exe) (CommandLine:\ \/dll* OR CommandLine:\ \/exe*)