((Image:\\regedit.exe OR OriginalFileName:REGEDIT.EXE) (CommandLine:\ \/i\ * OR CommandLine:\ \/s\ * OR CommandLine:.reg*)) (-((CommandLine:\ \-e\ * OR CommandLine:\ \/e\ * OR CommandLine:\ –e\ * OR CommandLine:\ —e\ * OR CommandLine:\ ―e\ * OR CommandLine:\ \-a\ * OR CommandLine:\ \/a\ * OR CommandLine:\ –a\ * OR CommandLine:\ —a\ * OR CommandLine:\ ―a\ * OR CommandLine:\ \-c\ * OR CommandLine:\ \/c\ * OR CommandLine:\ –c\ * OR CommandLine:\ —c\ * OR CommandLine:\ ―c\ *) CommandLine::[^ \\\\]))