(ImageLoaded:\\mpclient.dll (Image:\\MpCmdRun.exe OR Image:\\NisSrv.exe)) (-(Image:C\:\\Program\ Files\ \(x86\)\\Windows\ Defender\\* OR Image:C\:\\Program\ Files\\Microsoft\ Security\ Client\\* OR Image:C\:\\Program\ Files\\Windows\ Defender\\* OR Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\Platform\\* OR Image:C\:\\Windows\\WinSxS\\*))