Detects default CSExec service filename which indicates CSExec service installation and execution
Read the full analysis on IntelFusions