(Image:\\rundll32.exe OR OriginalFileName:RUNDLL32.EXE) ((CommandLine:\-sta\ * OR CommandLine:\-localserver\ *) (CommandLine:\{* CommandLine:\}*))