payload:
  - PROCESS-NAME,IDMan.exe