Fix up registry normalization -- as noted with the Harasom ransomware, the registry APIs will happily accept subkey strings with redundant backslashes.  Since this obviously would trip up signature modules, eliminate the extra backslashes.