((ParentCommandLine:\\cmd.exe* ParentCommandLine:\/c* ParentCommandLine:C\:\\Windows\\Setup\\Scripts\\*) (ParentCommandLine:SetupComplete.cmd OR ParentCommandLine:PartnerSetupComplete.cmd)) (-(Image:C\:\\Windows\\System32\\* OR Image:C\:\\Windows\\SysWOW64\\* OR Image:C\:\\Windows\\WinSxS\\* OR Image:C\:\\Windows\\Setup\\*))