OriginalFileName:AdvancedRun.exe OR (CommandLine:\ \/EXEFilename\ * CommandLine:\ \/Run*) OR (CommandLine:\ \/WindowState\ 0* CommandLine:\ \/RunAs\ * CommandLine:\ \/CommandLine\ *)