EventID:4697 (ServiceFileName:cmd* ServiceFileName:&&* ServiceFileName:clipboard\]\:\:*)