(TargetObject:\{2781761E\-28E0\-4109\-99FE\-B9D127C57AFE\} OR TargetObject:\{A7C452EF\-8E9F\-42EB\-9F2B\-245613CA0DC9\}) (-((Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\Platform\\* OR Image:C\:\\Program\ Files\\Windows\ Defender\\* OR Image:C\:\\Program\ Files\ \(x86\)\\Windows\ Defender\\*) Image:\\MsMpEng.exe))