(Image:\\w3wp.exe CommandLine:MSExchange*) (TargetFilename:.aspx OR TargetFilename:.asp OR TargetFilename:.ashx OR TargetFilename:.ps1 OR TargetFilename:.bat OR TargetFilename:.exe OR TargetFilename:.dll OR TargetFilename:.vbs)