Provider_Name:Service\ Control\ Manager EventID:7045 (ImagePath:rundll32.exe* ImagePath:shell32.dll* ImagePath:shellexec_rundll* ImagePath:powershell*)