Provider_Name:Service\ Control\ Manager EventID:7045 (ImagePath:&&* ImagePath:rundll32* ImagePath:shell32.dll* ImagePath:shellexec_rundll*) (ImagePath:value* OR ImagePath:invoke* OR ImagePath:comspec* OR ImagePath:iex*)