TargetObject:shellex\\ContextMenuHandlers\\EPP* (-((Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\Platform\\* OR Image:C\:\\Program\ Files\\Windows\ Defender\\* OR Image:C\:\\Program\ Files\ \(x86\)\\Windows\ Defender\\*) Image:\\MsMpEng.exe))