EventID:16403 (LocalName:\\Desktop\\* OR LocalName:C\:\\Users\\Public\\* OR LocalName:C\:\\PerfLogs\\*)