(FileName:\\AppData\\Local\\Comms\\Unistore\\data* OR FileName:\\AppData\\Local\\Comms\\UnistoreDB\\store.vol) (-(Image:System OR (Image:C\:\\Program\ Files\ \(x86\)\\* OR Image:C\:\\Program\ Files\\* OR Image:C\:\\Windows\\system32\\* OR Image:C\:\\Windows\\SysWOW64\\*))) (-((Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\* (Image:\\MpCopyAccelerator.exe OR Image:\\MsMpEng.exe)) OR (Image:\\thor64.exe OR Image:\\thor.exe)))