(ImageLoaded:\\libwazuhshared.dll OR ImageLoaded:\\libwinpthread\-1.dll) (-(ImageLoaded:C\:\\Program\ Files\\* OR ImageLoaded:C\:\\Program\ Files\ \(x86\)\\*)) (-((ImageLoaded:\\AppData\\Local\\* OR ImageLoaded:\\ProgramData\\*) ImageLoaded:\\mingw64\\bin\\libwinpthread\-1.dll))