Browser Native Messaging Registry Modification

registry where
  (process.code_signature.trusted == false or process.code_signature.exists == false) and
   not process.code_signature.status : ("errorExpired", "errorCode_endpoint*") and
   not user.id : ("S-1-5-18", "S-1-5-19", "S-1-5-19") and
   not process.executable : ("?:\\Program Files\\*.exe", "?:\\Program Files (x86)\\*", 
                             "?:\\Users\\*\\AppData\\Local\\*\\Free Download Manager\\fdm.exe") and
   registry.path : "HK*\\Software\\*\\NativeMessagingHosts\\*" and registry.data.strings : "*.json*" and
   not registry.data.strings : ("*:\\Program Files\\*", "*:\\Program Files (x86)\\*") and 
   not process.name : "winmixClickOnceHelper*.exe"