(Image:\\pwsh.exe OR OriginalFileName:pwsh.dll) (CommandLine:Set\-Service\ * CommandLine:DCLCWPDTSD*) (CommandLine:\-SecurityDescriptorSddl\ * OR CommandLine:\-sd\ *)