TargetObject:\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters* (TargetObject:\\Protocol_Catalog9\\Catalog_Entries* OR TargetObject:\\NameSpace_Catalog5\\Catalog_Entries*) (-(Details:\(Empty\) OR Image:C\:\\Windows\\System32\\MsiExec.exe OR Image:C\:\\Windows\\syswow64\\MsiExec.exe))