(Image:\\presentationhost.exe OR OriginalFileName:PresentationHost.exe) (CommandLine:http\:\/\/* OR CommandLine:https\:\/\/* OR CommandLine:ftp\:\/\/*)