((Image:\\winword.exe TargetFilename:\\Windows\\INetCache* TargetFilename:.cab) OR (Image:\\winword.exe (TargetFilename:\\AppData\\Local\\Temp\\* TargetFilename:.inf*))) (-(TargetFilename:C\:\\Users\\* TargetFilename:AppData\\Local\\Temp* TargetFilename:\\Content.inf))