Contents:http[s]?://[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3} (TargetFilename:.ps1\:Zone* OR TargetFilename:.bat\:Zone* OR TargetFilename:.exe\:Zone* OR TargetFilename:.vbe\:Zone* OR TargetFilename:.vbs\:Zone* OR TargetFilename:.dll\:Zone* OR TargetFilename:.one\:Zone* OR TargetFilename:.cmd\:Zone* OR TargetFilename:.hta\:Zone* OR TargetFilename:.xll\:Zone* OR TargetFilename:.lnk\:Zone*)