(Image:\\sc.exe OR OriginalFileName:sc.exe) (CommandLine:sdset* CommandLine:D;*) (CommandLine:;IU* OR CommandLine:;SU* OR CommandLine:;BA* OR CommandLine:;SY* OR CommandLine:;WD*)