(Image:\\RuntimeBroker.exe OR Image:\\outlook.exe OR Image:\\thunderbird.exe OR Image:\\brave.exe OR Image:\\chrome.exe OR Image:\\firefox.exe OR Image:\\iexplore.exe OR Image:\\maxthon.exe OR Image:\\MicrosoftEdge.exe OR Image:\\msedge.exe OR Image:\\msedgewebview2.exe OR Image:\\opera.exe OR Image:\\safari.exe OR Image:\\seamonkey.exe OR Image:\\vivaldi.exe OR Image:\\whale.exe) ((TargetFilename:.docm OR TargetFilename:.dotm OR TargetFilename:.xlsm OR TargetFilename:.xltm OR TargetFilename:.potm OR TargetFilename:.pptm) OR (TargetFilename:.docm\:Zone* OR TargetFilename:.dotm\:Zone* OR TargetFilename:.xlsm\:Zone* OR TargetFilename:.xltm\:Zone* OR TargetFilename:.potm\:Zone* OR TargetFilename:.pptm\:Zone*))