((Image:\\sc.exe OR OriginalFileName:sc.exe) (CommandLine:sdset* CommandLine:A;*) (CommandLine:;IU* OR CommandLine:;SU* OR CommandLine:;BA* OR CommandLine:;SY* OR CommandLine:;WD*)) (-ParentImage:C\:\\Hexnode\\Hexnode\ Agent\\Current\\HexnodeAgent.exe)