TargetObject:Software\\Classes\\exefile\\shell\\runas\\command\\isolatedCommand OR (TargetObject:Software\\Classes\\Folder\\shell\\open\\command\\SymbolicLinkValue Details:-1[0-9]{3}\\\\Software\\\\Classes\\\\)