(Image:\\regini.exe OR OriginalFileName:REGINI.EXE) CommandLine::[^ \\\\]