Detects mshta loaded by wmiprvse as parent as used by TA505 malicious documents
Already have an account? Log in
