(TargetImage:\\lsass.exe GrantedAccess:10) (-((SourceImage:C\:\\Program\ Files\\Common\ Files\\McAfee\\MMSSHost\\MMSSHOST.exe OR SourceImage:C\:\\Program\ Files\\Malwarebytes\\Anti\-Malware\\MBAMService.exe OR SourceImage:C\:\\Program\ Files\\Windows\ Defender\\MsMpEng.exe OR SourceImage:C\:\\PROGRAMDATA\\MALWAREBYTES\\MBAMSERVICE\\ctlrupdate\\mbupdatr.exe OR SourceImage:C\:\\Windows\\System32\\lsass.exe OR SourceImage:C\:\\Windows\\System32\\msiexec.exe OR SourceImage:C\:\\WINDOWS\\System32\\perfmon.exe OR SourceImage:C\:\\WINDOWS\\system32\\taskhostw.exe OR SourceImage:C\:\\WINDOWS\\system32\\taskmgr.exe OR SourceImage:C\:\\WINDOWS\\system32\\wbem\\wmiprvse.exe OR SourceImage:C\:\\Windows\\SysWOW64\\msiexec.exe OR SourceImage:C\:\\Windows\\sysWOW64\\wbem\\wmiprvse.exe) OR (SourceImage:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\* SourceImage:\\MsMpEng.exe) OR (SourceImage:C\:\\Program\ Files\\WindowsApps\\* SourceImage:\\GamingServices.exe) OR (SourceImage:\\PROCEXP64.EXE OR SourceImage:\\PROCEXP.EXE) OR (SourceImage:C\:\\ProgramData\\VMware\\VMware\ Tools\\* SourceImage:\\vmtoolsd.exe) OR ((SourceImage:C\:\\Program\ Files\\* OR SourceImage:C\:\\Program\ Files\ \(x86\)\\*) SourceImage:Antivirus*) OR (SourceImage:\\thor64.exe OR SourceImage:\\thor.exe OR SourceImage:\\aurora\-agent\-64.exe OR SourceImage:\\aurora\-agent.exe) OR ((SourceImage:\\AppData\\Local\\Temp\\* SourceImage:\\vs_bootstrapper_*) GrantedAccess:0x1410) OR (SourceImage:C\:\\Program\ Files\\* OR SourceImage:C\:\\Program\ Files\ \(x86\)\\* OR SourceImage:C\:\\WINDOWS\\system32\\*) OR SourceCommandLine:C\:\\WINDOWS\\system32\\wermgr.exe\ \-upload OR ((SourceImage:C\:\\Users\\* SourceImage:\\AppData\\Local\\*) (SourceImage:\\Microsoft\ VS\ Code\\Code.exe OR SourceImage:\\software_reporter_tool.exe OR SourceImage:\\DropboxUpdate.exe OR SourceImage:\\MBAMInstallerService.exe OR SourceImage:\\WebEx\\WebexHost.exe OR SourceImage:\\Programs\\Microsoft\ VS\ Code\\Code.exe OR SourceImage:\\JetBrains\\Toolbox\\bin\\jetbrains\-toolbox.exe)) OR (SourceImage:\\xampp\-control.exe GrantedAccess:0x410) OR (SourceImage:\\SteamLibrary\\steamapps\\* (GrantedAccess:0x410 OR GrantedAccess:0x10))))