((FileName:\\AppData\\Roaming\\Ethereum\\keystore\\* OR FileName:\\AppData\\Roaming\\EthereumClassic\\keystore\\* OR FileName:\\AppData\\Roaming\\monero\\wallets\\*) OR (FileName:\\AppData\\Roaming\\Bitcoin\\wallet.dat OR FileName:\\AppData\\Roaming\\BitcoinABC\\wallet.dat OR FileName:\\AppData\\Roaming\\BitcoinSV\\wallet.dat OR FileName:\\AppData\\Roaming\\DashCore\\wallet.dat OR FileName:\\AppData\\Roaming\\DogeCoin\\wallet.dat OR FileName:\\AppData\\Roaming\\Litecoin\\wallet.dat OR FileName:\\AppData\\Roaming\\Ripple\\wallet.dat OR FileName:\\AppData\\Roaming\\Zcash\\wallet.dat)) (-(Image:System OR (Image:C\:\\Program\ Files\ \(x86\)\\* OR Image:C\:\\Program\ Files\\* OR Image:C\:\\Windows\\system32\\* OR Image:C\:\\Windows\\SysWOW64\\*))) (-(Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\* (Image:\\MpCopyAccelerator.exe OR Image:\\MsMpEng.exe)))