You need (?<!cyg)win. What you have matches three characters that are "win" and aren't "cyg" :)