Suspicious Browser Preferences File Modification

file where event.action == "overwrite" and file.name : ("Preferences", "Secure Preferences") and
    process.executable != null and
	 file.path :
	         ("?:\\Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", 
	          "?:\\Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", 
	          "?:\\users\\*\\appdata\\local\\microsoft\\edge\\user data\\default\\Preferences", 
	          "?:\\users\\*\\appdata\\local\\microsoft\\edge\\user data\\default\\Secure Preferences") and
	 not user.id : ("S-1-5-18", "S-1-5-19", "S-1-5-19") and
	 not process.executable :
	               ("?:\\Program Files\\*.exe",
	                "?:\\Program Files (x86)\\*.exe",
	                "C:\\Windows\\explorer.exe",
	                "C:\\Windows\\System32\\xcopy.exe",
	                "C:\\Windows\\System32\\Robocopy.exe",
	                "C:\\Windows\\System32\\wscript.exe",
	                "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
	                "C:\\Users\\*\\AppData\\Local\\Microsoft\\DefaultSetup\\DefaultSetup.exe",
	                "C:\\Users\\*\\.cache\\selenium\\chromedriver\\win64\\138.0.7204.157\\chromedriver.exe") and
	 not (process.code_signature.subject_name : "Microsoft*" and process.code_signature.trusted == true and
	      process.executable : ("?:\\Users\\*\\AppData\\Local\\Microsoft\\EdgeWebView\\Application\\*\\msedgewebview2.exe",
	                            "?:\\Users\\*\\AppData\\Local\\Microsoft\\Edge SxS\\Application\\msedge.exe",
	                            "?:\\Users\\*\\AppData\\Local\\Microsoft\\Edge\\Application\\msedge.exe",
	                            "?:\\Users\\*\\AppData\\Local\\Temp\\IXP???.TMP\\MEDefaultPCReset.exe")) and
	 not (process.code_signature.trusted == true and
	      process.code_signature.subject_name :
	                ("Google LLC", "PASSWORD BOSS LLC", "Piriform Ltd", "Piriform Software Ltd", "UiPath, Inc.",
	                 "Gen Digital Inc.", "SOFT SOLUTIONS HUB LLC", "PIRIFORM SOFTWARE LIMITED", "SOFT SOLUTIONS HUB LLC",
	                 "Guangxi Yunao Network Technology Co. Ltd.", "Andrew Ziem", "ECHO INFINI SDN. BHD."))