ImageLoaded:\\mscorsvc.dll (-(ImageLoaded:C\:\\Windows\\Microsoft.NET\\Framework\\* OR ImageLoaded:C\:\\Windows\\Microsoft.NET\\Framework64\\* OR ImageLoaded:C\:\\Windows\\Microsoft.NET\\FrameworkArm\\* OR ImageLoaded:C\:\\Windows\\Microsoft.NET\\FrameworkArm64\\* OR ImageLoaded:C\:\\Windows\\WinSxS\\*))