((Image:\\squirrel.exe OR Image:\\update.exe) (CommandLine:\-\-processStart* OR CommandLine:\-\-processStartAndWait* OR CommandLine:\-\-createShortcut*)) (-(((CommandLine:\:\\Users\\* CommandLine:\\AppData\\Local\\Discord\\Update.exe* CommandLine:Discord.exe*) (CommandLine:\-\-createShortcut* OR CommandLine:\-\-processStart*)) OR ((CommandLine:\:\\Users\\* CommandLine:\\AppData\\Local\\GitHubDesktop\\Update.exe* CommandLine:GitHubDesktop.exe*) (CommandLine:\-\-createShortcut* OR CommandLine:\-\-processStartAndWait*)) OR ((CommandLine:\:\\Users\\* CommandLine:\\AppData\\Local\\Microsoft\\Teams\\Update.exe* CommandLine:Teams.exe*) (CommandLine:\-\-processStart* OR CommandLine:\-\-createShortcut*)) OR ((CommandLine:\:\\Users\\* CommandLine:\\AppData\\Local\\yammerdesktop\\Update.exe* CommandLine:Yammer.exe*) (CommandLine:\-\-processStart* OR CommandLine:\-\-createShortcut*))))