(Image:\\powershell.exe OR Image:\\pwsh.exe) (CommandLine:\-f\ C\:\\Users\\Public* OR CommandLine:\-f\ \"C\:\\Users\\Public* OR CommandLine:\-f\ %Public%* OR CommandLine:\-fi\ C\:\\Users\\Public* OR CommandLine:\-fi\ \"C\:\\Users\\Public* OR CommandLine:\-fi\ %Public%* OR CommandLine:\-fil\ C\:\\Users\\Public* OR CommandLine:\-fil\ \"C\:\\Users\\Public* OR CommandLine:\-fil\ %Public%* OR CommandLine:\-file\ C\:\\Users\\Public* OR CommandLine:\-file\ \"C\:\\Users\\Public* OR CommandLine:\-file\ %Public%*)