((CommandLine:7z.exe\ a\ \-v500m\ \-mx9\ \-r0\ \-p* OR CommandLine:7z.exe\ a\ \-mx9\ \-r0\ \-p*) (CommandLine:.zip* CommandLine:.txt*)) OR ((CommandLine:7z.exe\ a\ \-v500m\ \-mx9\ \-r0\ \-p* OR CommandLine:7z.exe\ a\ \-mx9\ \-r0\ \-p*) (CommandLine:.zip* CommandLine:.log*)) OR ((ParentCommandLine:wscript.exe* ParentCommandLine:.vbs*) (CommandLine:rundll32.exe* CommandLine:C\:\\Windows* CommandLine:.dll,Tk_*)) OR (ParentImage:\\rundll32.exe (ParentCommandLine:C\:\\Windows* ParentCommandLine:.dll*) CommandLine:cmd.exe\ \/C\ *) OR (ParentImage:\\rundll32.exe Image:\\dllhost.exe CommandLine:)