Image:\\SharpSuccessor.exe OR OriginalFileName:SharpSuccessor.exe OR CommandLine:SharpSuccessor* OR (CommandLine:\ add\ * CommandLine:\ \/impersonate* CommandLine:\ \/path* CommandLine:\ \/account* CommandLine:\ \/name*)