I thin the rule which you looking for is the one below. The one you have created it will not work.
You need to include all processes (*) and then block the path in the path C:\**\AppData\**\*.exe
It will not cause an massive overhead on the scan engine
Please, test this and let me know
I think instead of **.doc put only single * which will include all files.
**.doc = *