(((OriginalFileName:powershell_ise.exe OR OriginalFileName:PowerShell.EXE OR OriginalFileName:pwsh.dll) OR (Image:\\powershell_ise.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe)) (CommandLine:\-executionpolicy\ * OR CommandLine:\ \-ep\ * OR CommandLine:\ \-exec\ *) (CommandLine:Bypass* OR CommandLine:Unrestricted*)) (-((ParentImage:C\:\\Windows\\SysWOW64\\msiexec.exe OR ParentImage:C\:\\Windows\\System32\\msiexec.exe) (CommandLine:\-NoProfile\ \-ExecutionPolicy\ Bypass\ \-File\ \"C\:\\Program\ Files\\PowerShell\\7\\* OR CommandLine:\-NoProfile\ \-ExecutionPolicy\ Bypass\ \-File\ \"C\:\\Program\ Files\ \(x86\)\\PowerShell\\7\\*))) (-((ParentImage:C\:\\Program\ Files\\Avast\ Software\\Avast\\* OR ParentImage:C\:\\Program\ Files\ \(x86\)\\Avast\ Software\\Avast\\* OR ParentImage:\\instup.exe*) (CommandLine:\-ExecutionPolicy\ ByPass\ \-File\ \"C\:\\Program\ Files\\Avast\ Software\\Avast* OR CommandLine:\-ExecutionPolicy\ ByPass\ \-File\ \"C\:\\Program\ Files\ \(x86\)\\Avast\ Software\\Avast\\*)))