(OriginalFileName:sc.exe OR Image:\\sc.exe) CommandLine:\ stop\ *