(Image:\\cmstp.exe OR OriginalFileName:CMSTP.EXE) (CommandLine:\/s* OR CommandLine:\-s* OR CommandLine:\/au* OR CommandLine:\-au* OR CommandLine:\/ni* OR CommandLine:\-ni*)