(Image:\\MSOHTMED.exe OR OriginalFileName:MsoHtmEd.exe) (CommandLine:ftp\:\/\/* OR CommandLine:http\:\/\/* OR CommandLine:https\:\/\/*)