Image:\\rundll32.exe (ImageLoaded:\:\\ProgramData* OR ImageLoaded:\\AppData\\Local\\*) ImageLoaded:[a-zA-Z]{5,6}\\.wll