(Image:\\regsvr32.exe CommandLine:regsvr32\ \/s* CommandLine:\\contextMenu\\NppShell.dll*) (-(Image:C\:\\Windows\\System32\\regsvr32.exe OR Image:C\:\\Windows\\SysWOW64\\regsvr32.exe))