(Image:\\tscon.exe OR OriginalFileName:tscon.exe) (IntegrityLevel:System OR IntegrityLevel:S\-1\-16\-16384)