File file previous name = *.tmp , *._new , *.rra , *.txt , *.j , *.rbf , *.jpg , *.png , *.jpeg , *.gif , *.tiff , *.psd , *.pdf , *.eps , *.ai , *.indd , *.raw , *.bmp , *.ico , *.svg , *.tif , *.odt , *.rtf , *.tex , *.wpd AND file name = *.pyi , *.mof , *.hta , *.vbs , *.bat , *.aspx , *.pptm , *.pyd , *.pyc , *.php , *.py , *.js , *.ps1 , *.ps , *.crx , *.sct , *.tcl , *.dotm AND file path != *config.msi* AND *ccm* AND *trend micro* AND *adobe* AND *dell* AND *sessionstore* AND *browser-extension-data* AND *cortana* AND *microsoftedge* AND *microsoft vs code* AND *inetcache* AND file previous path != *prf* AND *set* AND *jds* AND *bit* AND *~$* AND *~w* AND action type = rename Process cgo name != suservice.exe AND wuauclt.exe AND besclient.exe AND tiworker.exe AND fwcld.exe AND svchost.exe AND tortoiseproc.exe AND emcoreservice.exe AND initiated by != 1e.client.exe AND expand.exe AND trustedinstaller.exe AND wuauclt.exe AND setup.exe AND setupsup_la31.exe AND ssms-setup-enu.exe AND lmirtechconsole.exe AND initiated by != git-*.tmp AND *.tmp