ParentImage:\\ftp.exe OR ((Image:\\ftp.exe OR OriginalFileName:ftp.exe) (CommandLine:\-s\:* OR CommandLine:\/s\:* OR CommandLine:–s\:* OR CommandLine:—s\:* OR CommandLine:―s\:*))