(Provider_Name:Service\ Control\ Manager EventID:7045) ((ServiceName:AnyDesk* ServiceName:Service*) OR ImagePath:AnyDesk*)