Detects execution of "sc.exe" to query information about registered services on the system
Read the full analysis on IntelFusions