((OriginalFileName:7z*.exe OR OriginalFileName:rar.exe OR OriginalFileName:Command*Line*RAR*) (CommandLine:\ \-p* OR CommandLine:\ \-ta* OR CommandLine:\ \-tb* OR CommandLine:\ \-sdel* OR CommandLine:\ \-dw* OR CommandLine:\ \-hp*)) (-(ParentImage:\:\\Program\ Files\\* OR ParentImage:\:\\Program\ Files\ \(x86\)\\*))