((FileName:\\Sputnik\\Sputnik* OR FileName:\\MapleStudio\\ChromePlus* OR FileName:\\QIP\ Surf* OR FileName:\\BlackHawk* OR FileName:\\7Star\\7Star* OR FileName:\\CatalinaGroup\\Citrio* OR FileName:\\Google\\Chrome* OR FileName:\\Coowon\\Coowon* OR FileName:\\CocCoc\\Browser* OR FileName:\\uCozMedia\\Uran* OR FileName:\\Tencent\\QQBrowser* OR FileName:\\Orbitum* OR FileName:\\Slimjet* OR FileName:\\Iridium* OR FileName:\\Vivaldi* OR FileName:\\Chromium* OR FileName:\\GhostBrowser* OR FileName:\\CentBrowser* OR FileName:\\Xvast* OR FileName:\\Chedot* OR FileName:\\SuperBird* OR FileName:\\360Browser\\Browser* OR FileName:\\360Chrome\\Chrome* OR FileName:\\Comodo\\Dragon* OR FileName:\\BraveSoftware\\Brave\-Browser* OR FileName:\\Torch* OR FileName:\\UCBrowser\\* OR FileName:\\Blisk* OR FileName:\\Epic\ Privacy\ Browser* OR FileName:\\Nichrome* OR FileName:\\Amigo* OR FileName:\\Kometa* OR FileName:\\Xpom* OR FileName:\\Microsoft\\Edge* OR FileName:\\Liebao7Default\\EncryptedStorage* OR FileName:\\AVAST\ Software\\Browser* OR FileName:\\Kinza* OR FileName:\\Mozilla\\SeaMonkey\\* OR FileName:\\Comodo\\IceDragon\\* OR FileName:\\8pecxstudios\\Cyberfox\\* OR FileName:\\FlashPeak\\SlimBrowser\\* OR FileName:\\Moonchild\ Productions\\Pale\ Moon\\*) (FileName:\\Profiles\\* OR FileName:\\User\ Data*) ((FileName:\\Login\ Data* OR FileName:\\Cookies* OR FileName:\\EncryptedStorage* OR FileName:\\WebCache\\*) OR (FileName:cert9.db OR FileName:cookies.sqlite OR FileName:formhistory.sqlite OR FileName:key3.db OR FileName:key4.db OR FileName:Login\ Data.sqlite OR FileName:logins.json OR FileName:places.sqlite))) (-((Image:\\Sputnik.exe OR Image:\\ChromePlus.exe OR Image:\\QIP\ Surf.exe OR Image:\\BlackHawk.exe OR Image:\\7Star.exe OR Image:\\Sleipnir5.exe OR Image:\\Citrio.exe OR Image:\\Chrome\ SxS.exe OR Image:\\Chrome.exe OR Image:\\Coowon.exe OR Image:\\CocCocBrowser.exe OR Image:\\Uran.exe OR Image:\\QQBrowser.exe OR Image:\\Orbitum.exe OR Image:\\Slimjet.exe OR Image:\\Iridium.exe OR Image:\\Vivaldi.exe OR Image:\\Chromium.exe OR Image:\\GhostBrowser.exe OR Image:\\CentBrowser.exe OR Image:\\Xvast.exe OR Image:\\Chedot.exe OR Image:\\SuperBird.exe OR Image:\\360Browser.exe OR Image:\\360Chrome.exe OR Image:\\dragon.exe OR Image:\\brave.exe OR Image:\\torch.exe OR Image:\\UCBrowser.exe OR Image:\\BliskBrowser.exe OR Image:\\Epic\ Privacy\ Browser.exe OR Image:\\nichrome.exe OR Image:\\AmigoBrowser.exe OR Image:\\KometaBrowser.exe OR Image:\\XpomBrowser.exe OR Image:\\msedge.exe OR Image:\\LiebaoBrowser.exe OR Image:\\AvastBrowser.exe OR Image:\\Kinza.exe OR Image:\\seamonkey.exe OR Image:\\icedragon.exe OR Image:\\cyberfox.exe OR Image:\\SlimBrowser.exe OR Image:\\palemoon.exe) OR (Image:\\Sputnik\\* OR Image:\\MapleStudio\\* OR Image:\\QIP\ Surf\\* OR Image:\\BlackHawk\\* OR Image:\\7Star\\* OR Image:\\Fenrir\ Inc\\* OR Image:\\CatalinaGroup\\* OR Image:\\Google\\* OR Image:\\Coowon\\* OR Image:\\CocCoc\\* OR Image:\\uCozMedia\\* OR Image:\\Tencent\\* OR Image:\\Orbitum\\* OR Image:\\Slimjet\\* OR Image:\\Iridium\\* OR Image:\\Vivaldi\\* OR Image:\\Chromium\\* OR Image:\\GhostBrowser\\* OR Image:\\CentBrowser\\* OR Image:\\Xvast\\* OR Image:\\Chedot\\* OR Image:\\SuperBird\\* OR Image:\\360Browser\\* OR Image:\\360Chrome\\* OR Image:\\Comodo\\* OR Image:\\BraveSoftware\\* OR Image:\\Torch\\* OR Image:\\UCBrowser\\* OR Image:\\Blisk\\* OR Image:\\Epic\ Privacy\ Browser\\* OR Image:\\Nichrome\\* OR Image:\\Amigo\\* OR Image:\\Kometa\\* OR Image:\\Xpom\\* OR Image:\\Microsoft\\* OR Image:\\Liebao7\\* OR Image:\\AVAST\ Software\\* OR Image:\\Kinza\\* OR Image:\\Mozilla\\* OR Image:\\8pecxstudios\\* OR Image:\\FlashPeak\\* OR Image:\\Moonchild\ Productions\\*) OR (Image:System ParentImage:Idle) OR (Image:C\:\\Program\ Files\\* OR Image:C\:\\Program\ Files\ \(x86\)\\* OR Image:C\:\\Windows\\System32\\* OR Image:C\:\\Windows\\SysWOW64\\*))) (-((Image:\\Microsoft\\Windows\ Defender\\* (Image:\\MpCopyAccelerator.exe OR Image:\\MsMpEng.exe)) OR (Image:\\thor.exe OR Image:\\thor64.exe) OR ParentImage:C\:\\Windows\\System32\\msiexec.exe OR Image:\\everything.exe))