(Image:\\cmd.exe OR Image:\\powershell_ise.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\w3wp.exe) (TargetFilename:C\:\\Program\ Files\\Common\ Files\\Microsoft\ Shared\\Web\ Server\ Extensions\\* OR TargetFilename:C\:\\Program\ Files\ \(x86\)\\Common\ Files\\Microsoft\ Shared\\Web\ Server\ Extensions\\*) (TargetFilename:\\15\\TEMPLATE\\LAYOUTS\\* OR TargetFilename:\\16\\TEMPLATE\\LAYOUTS\\*) (TargetFilename:.asax OR TargetFilename:.ascx OR TargetFilename:.ashx OR TargetFilename:.asmx OR TargetFilename:.asp OR TargetFilename:.aspx OR TargetFilename:.bat OR TargetFilename:.cmd OR TargetFilename:.cer OR TargetFilename:.config OR TargetFilename:.hta OR TargetFilename:.js OR TargetFilename:.jsp OR TargetFilename:.jspx OR TargetFilename:.php OR TargetFilename:.ps1 OR TargetFilename:.vbs)