(
exists file "besrelay.dmp" of parent folder of regapp "besrelay.exe"
)
OR
(
if login account of service "BESRelay" != "LocalSystem" then exists file
(
(
(
(
value "Local AppData" of it as string & "\BigFix\besrelay.dmp"
)
of keys "Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" of keys of key "HKU" of registry
)
)
whose
(
it as string does not contain "\Default User\"
)
)
else false
)
(exists file "besrelay.dmp" of parent folder of regapp "besrelay.exe") OR (if login account of service "BESRelay" != "LocalSystem" then exists file ((((value "Local AppData" of it as string & "\BigFix\besrelay.dmp" ) of keys "Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" of keys of key "HKU" of registry)) whose (it as string does not contain "\Default User\")) else false)
