(((Image:\\powershell.exe OR Image:\\pwsh.exe) OR (OriginalFileName:PowerShell.EXE OR OriginalFileName:pwsh.dll)) CommandLine:Add\-PSSnapin* (CommandLine:Microsoft.Exchange.Powershell.Snapin* OR CommandLine:Microsoft.Exchange.Management.PowerShell.SnapIn*)) (-(ParentImage:C\:\\Windows\\System32\\msiexec.exe CommandLine:$exserver=Get\-ExchangeServer\ \(\[Environment\]\:\:MachineName\)\ \-ErrorVariable\ exerr\ 2>\ $null*))