((Image:\\regedit.exe OR OriginalFileName:REGEDIT.EXE) ((CommandLine:\ \/i\ * OR CommandLine:.reg*) CommandLine::[^ \\\\])) (-(CommandLine:\ \-e\ * OR CommandLine:\ \/e\ * OR CommandLine:\ –e\ * OR CommandLine:\ —e\ * OR CommandLine:\ ―e\ * OR CommandLine:\ \-a\ * OR CommandLine:\ \/a\ * OR CommandLine:\ –a\ * OR CommandLine:\ —a\ * OR CommandLine:\ ―a\ * OR CommandLine:\ \-c\ * OR CommandLine:\ \/c\ * OR CommandLine:\ –c\ * OR CommandLine:\ —c\ * OR CommandLine:\ ―c\ *))