(Image:\\dotnet\-dump.exe OR OriginalFileName:dotnet\-dump.dll) CommandLine:collect*