(TargetObject:HKCR\\* Details:URL\:*) (-(Details:URL\:ms\-* OR (Image:C\:\\Program\ Files\ \(x86\)* OR Image:C\:\\Program\ Files\\* OR Image:C\:\\Windows\\System32\\* OR Image:C\:\\Windows\\SysWOW64\\*)))