(TargetImage:\\calc.exe OR TargetImage:\\calculator.exe OR TargetImage:\\mspaint.exe OR TargetImage:\\notepad.exe OR TargetImage:\\ping.exe OR TargetImage:\\wordpad.exe OR TargetImage:\\write.exe) GrantedAccess:0x1FFFFF