(OriginalFileName:HH.exe OR Image:\\hh.exe) CommandLine:.chm*