(Image:\\WerFaultSecure.exe OR OriginalFileName:WerFaultSecure.exe) (CommandLine:\ \/h\ * CommandLine:\ \/pid\ * CommandLine:\ \/tid\ * CommandLine:\ \/encfile\ * CommandLine:\ \/cancel\ * CommandLine:\ \/type\ * CommandLine:\ 268310*)