ScriptBlockText:rundll32.exe* ScriptBlockText:shell32.dll* ScriptBlockText:shellexec_rundll* ScriptBlockText:powershell*