((Image:\\schtasks.exe OR OriginalFileName:schtasks.exe) (CommandLine:\/create* OR CommandLine:\-create*) (CommandLine:\/xml* OR CommandLine:\-xml*)) (-(CommandLine:.xml* OR (IntegrityLevel:System OR IntegrityLevel:S\-1\-16\-16384) OR (ParentImage:\\rundll32.exe (ParentCommandLine:\:\\WINDOWS\\Installer\\MSI* ParentCommandLine:.tmp,zzzzInvokeManagedCustomActionOutOfProc*)))) (-(ParentImage:\:\\ProgramData\\OEM\\UpgradeTool\\CareCenter_*\\BUnzip\\Setup_msi.exe OR ParentImage:\:\\Program\ Files\\Axis\ Communications\\AXIS\ Camera\ Station\\SetupActions.exe OR ParentImage:\:\\Program\ Files\\Axis\ Communications\\AXIS\ Device\ Manager\\AdmSetupActions.exe OR ParentImage:\:\\Program\ Files\ \(x86\)\\Zemana\\AntiMalware\\AntiMalware.exe OR ParentImage:\:\\Program\ Files\\Dell\\SupportAssist\\pcdrcui.exe))