(FileName:\\* (FileName:\\sysvol\\* FileName:\\Policies\\*)) (-(Image:\:\\Program\ Files\ \(x86\)\\* OR Image:\:\\Program\ Files\\* OR Image:\:\\Windows\\explorer.exe* OR Image:\:\\Windows\\system32\\* OR Image:\:\\Windows\\SysWOW64\\*))