(Image:\\regini.exe OR OriginalFileName:REGINI.EXE) (-CommandLine::[^ \\\\])