(Provider_Name:Service\ Control\ Manager EventID:7045) ((ImagePath:\\\\.\\pipe* OR ImagePath:\\Users\\Public\\* OR ImagePath:\\Windows\\Temp\\*) OR (ImagePath:\ \-e* (ImagePath:\ aQBlAHgA* OR ImagePath:\ aWV4I* OR ImagePath:\ IAB* OR ImagePath:\ JAB* OR ImagePath:\ PAA* OR ImagePath:\ SQBFAFgA* OR ImagePath:\ SUVYI*))) (-ImagePath:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\Definition\ Updates\\*) (-ImagePath:C\:\\WINDOWS\\TEMP\\thor10\-remote\\thor64.exe*)