TargetObject:\\CurrentControlSet\\Control\\Session\ Manager\\PendingFileRenameOperations* (Image:\\Users\\Public\\* OR (Image:\\reg.exe OR Image:\\regedit.exe))