(Image:\\mshta.exe OR OriginalFileName:MSHTA.EXE) (CommandLine:http\:\/\/* OR CommandLine:https\:\/\/* OR CommandLine:ftp\:\/\/*)