EventID:5140 ((ShareName:\\MSHTML_C7\\* ShareName:[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}) OR (ShareLocalPath:\\MSHTML_C7\\* ShareLocalPath:[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}))