#Command: "C:\Windows\system32\wermgr.exe" "-queuereporting_s_user" "C:\Users\Administrator\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_VCTIP.EXE_292a8f6ced59b2a234ecb6193968473f49e43db_cab_1a63beb2" 
C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\MICROSOFT\WINDOWS\WER\REPORTARCHIVE\NONCRITICAL_VCTIP.EXE_292A8F6CED59B2A234ECB6193968473F49E43DB_1CD3CAA4\REPORT.WER