((Image:\\winword.exe OR Image:\\excel.exe OR Image:\\powerpnt.exe OR Image:\\MSACCESS.EXE OR Image:\\MSPUB.EXE OR Image:\\fltldr.exe OR Image:\\cmd.exe OR Image:\\certutil.exe OR Image:\\mshta.exe OR Image:\\cscript.exe OR Image:\\wscript.exe OR Image:\\curl.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe) TargetFilename:.dll (TargetFilename:\\Users\\* TargetFilename:\\AppData\\*) (TargetFilename:\\Microsoft\\OneDrive\\* OR TargetFilename:\\Microsoft\ OneDrive\\* OR TargetFilename:\\Microsoft\\Teams\\* OR TargetFilename:\\Local\\slack\\app\-* OR TargetFilename:\\Local\\Programs\\Microsoft\ VS\ Code\\*)) (-(Image:\\cmd.exe (TargetFilename:\\Users\\* TargetFilename:\\AppData\\* TargetFilename:\\Microsoft\\OneDrive\\* TargetFilename:\\api\-ms\-win\-core\-*)))