Mwwaah, the latest freeware version is usable but has some issues due to it age
It does not monitor MSI (installers), so it does not block all executables. You have to block the Microsoft Executables which install those MSI's which is like shooting with a canon on a fly
2. DotNet DLL
It don't know whether this old version can block dotNet DLL's running in user folders (as far as I know Software Restriction Policies can't block dotNet DLL's running from user folders neither)
3. Internal command blacklist data base has aged
The charm of OS-Armor is that it had a lot of internal rules to block specific command based/ fileless attacks
On the plus side a lot of the options are still valuable hardening tweaks, but when all those pages of OS Armor options don't ring a bell to you, I think using Hard_Configurator in recommended setting (SWH-like mode) plus blocking sponsors might be a better idea.