((ParentImage:\\WINWORD.EXE OR ParentImage:\\EXCEL.EXE OR ParentImage:\\POWERPNT.exe OR ParentImage:\\MSPUB.exe OR ParentImage:\\VISIO.exe OR ParentImage:\\MSACCESS.exe OR ParentImage:\\EQNEDT32.exe) Image:C\:\\users\\* Image:.exe) (-Image:\\Teams.exe)