(Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE OR (CommandLine:rundll32.exe* OR CommandLine:rundll32\ *)) (CommandLine:.dll* (CommandLine:\ StartW OR CommandLine:,StartW))