((IntegrityLevel:High OR IntegrityLevel:System OR IntegrityLevel:S\-1\-16\-16384 OR IntegrityLevel:S\-1\-16\-12288) Image:C\:\\Windows\\System32\\ComputerDefaults.exe) (-(ParentImage:\:\\Windows\\System32* OR ParentImage:\:\\Program\ Files*))