Detects suspicious inline VBScript keywords as used by UNC2452
Read the full analysis on IntelFusions