ImageLoaded:\\vcruntime140.dll (-((ImageLoaded:C\:\\Windows\\System32\\* OR ImageLoaded:C\:\\Windows\\SysWOW64\\* OR ImageLoaded:C\:\\Program\ Files\\* OR ImageLoaded:C\:\\Program\ Files\ \(x86\)\\*) OR (Signed:TRUE SignatureStatus:Valid Description:C\ Runtime\ Library))) (-(Image:C\:\\Users\\* Image:\\AppData\\Local\\Microsoft\\OneDrive\\*))