Detects the creation of a new service using the "sc.exe" utility.
Read the full analysis on IntelFusions