(TargetObject:Software\\Microsoft\\Windows\\CurrentVersion* (Details:vbscript\:* OR Details:jscript\:* OR Details:mshtml,* OR Details:RunHTMLApplication* OR Details:Execute\(* OR Details:CreateObject* OR Details:window.close*)) (-(TargetObject:Software\\Microsoft\\Windows\\CurrentVersion\\Run* OR (Image:\\msiexec.exe TargetObject:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\* (Details:\\Microsoft.NET\\Primary\ Interop\ Assemblies\\Microsoft.mshtml.dll* OR Details:<\\Microsoft.mshtml,fileVersion=* OR Details:_mshtml_dll_* OR Details:<\\Microsoft.mshtml,culture=*))))