(TargetImage:\\verclsid.exe GrantedAccess:0x1FFFFF) ((CallTrace:|UNKNOWN\(* CallTrace:VBE7.DLL*) OR (SourceImage:\\Microsoft\ Office\\* CallTrace:|UNKNOWN*))