Image:\\wsass.exe OR Hashes:IMPHASH=32F5095C9BBDCACF28FD4060EB4DFC42* OR CommandLine:(?i)\\.exe[\\"\\']?\\s+[^\\"]{0,64}werfaultsecure\\.exe[\\"\\']?\\s+\\d{2,10}