(ImageLoaded:\\fastprox.dll OR ImageLoaded:\\wbemcomn.dll OR ImageLoaded:\\wbemprox.dll OR ImageLoaded:\\wbemsvc.dll OR ImageLoaded:\\WmiApRpl.dll OR ImageLoaded:\\wmiclnt.dll OR ImageLoaded:\\WMINet_Utils.dll OR ImageLoaded:\\wmiprov.dll OR ImageLoaded:\\wmiutils.dll) (-(Image:\:\\Program\ Files\ \(x86\)\\* OR Image:\:\\Program\ Files\\* OR Image:\:\\Windows\\explorer.exe* OR Image:\:\\Windows\\Microsoft.NET\\Framework\\* OR Image:\:\\Windows\\Microsoft.NET\\FrameworkArm\\* OR Image:\:\\Windows\\Microsoft.NET\\FrameworkArm64\\* OR Image:\:\\Windows\\Microsoft.NET\\Framework64\\* OR Image:\:\\Windows\\System32\\* OR Image:\:\\Windows\\SysWOW64\\*)) (-((Image:\\WindowsAzureGuestAgent.exe OR Image:\\WaAppAgent.exe) OR (Image:\\thor.exe OR Image:\\thor64.exe) OR Image:\\MsMpEng.exe OR (Image:\\Microsoft\\Teams\\current\\Teams.exe* OR Image:\\Microsoft\\Teams\\Update.exe*) OR (Image:\:\\Windows\\Sysmon.exe OR Image:\:\\Windows\\Sysmon64.exe)))