EventID:4698 (TaskContent:\:\\ProgramData\\* OR TaskContent:\\AppData\\Local\\*) (TaskContent:rundll32* TaskContent:.wll* TaskContent:#1*) (TaskContent:OneDrive* OR TaskContent:Sens\ Api*)