(Image:\\sc.exe (IntegrityLevel:Medium OR IntegrityLevel:S\-1\-16\-8192)) ((CommandLine:config* CommandLine:binPath*) OR (CommandLine:failure* CommandLine:command*))