HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ExtractionWizard [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers [DisableAutoplay] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\* [*] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\* [*] HKCU\Software\Microsoft\Windows\Shell\BagMRU\* [*] HKCU\Software\Microsoft\Windows\Shell\Bags\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer [IconUnderline] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer [ShowDriveLettersFirst] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer [ShowFrequent] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer [ShowRecent] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer [LaunchTo] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Search\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Modules\CommonPlaces\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BannerStore\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BannerSettings\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{645FF040-5081-101B-9F08-00AA002F954E}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{645FF040-5081-101B-9F08-00AA002F954E}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{59031a47-3f72-44a7-89c5-5595fe6b30ee}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{59031a47-3f72-44a7-89c5-5595fe6b30ee}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{20D04FE0-3AEA-1069-A2D8-08002B30309D}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{20D04FE0-3AEA-1069-A2D8-08002B30309D}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{871C5380-42A0-1069-A2EA-08002B30309D}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{871C5380-42A0-1069-A2EA-08002B30309D}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu [{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel [{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects [VisualFXSetting] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\* [DefaultApplied] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{7b0db17d-9cd2-4a93-9733-46cc89022e7c}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{2112AB0A-C86A-4ffe-A368-0DE96E47012E}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{A990AE9F-A03B-4e80-94BC-9912D7504104}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{491E922F-5643-4af4-A7EB-4E7A138D8174}] %CSIDL_APPDATA%\Microsoft\Windows\Libraries [*] HKCU\Software\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Lock Screen [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Lock Screen\Creative [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\FileAssociations\* [*] HKCU\Software\Microsoft\Windows\Shell\Associations [FileAssociationsUpdateVersion] HKCU\Software\Microsoft\Windows\Shell\Associations\AppUrlAssociations\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Spotlight\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}\* [*] HKCU\Software\Classes\CLSID\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\DesktopSpotlight\Settings\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\ValueBanner\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\RulesEngine\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\UnifiedConsent\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers [DisableAutoplay] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\* [*] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\* [*] HKCU\Software\Microsoft\Windows\Shell\BagMRU\* [*] HKCU\Software\Microsoft\Windows\Shell\Bags\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Search\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Modules\CommonPlaces\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{7b0db17d-9cd2-4a93-9733-46cc89022e7c}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{2112AB0A-C86A-4ffe-A368-0DE96E47012E}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{A990AE9F-A03B-4e80-94BC-9912D7504104}] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders [{491E922F-5643-4af4-A7EB-4E7A138D8174}] %CSIDL_APPDATA%\Microsoft\Windows\Libraries [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Spotlight\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}\* [*] HKCU\Software\Classes\CLSID\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\DesktopSpotlight\Settings\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\ValueBanner\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\RulesEngine\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\UnifiedConsent\* [*] %CSIDL_PUBLIC%\Libraries [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer [SmartScreenEnabled] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer [AicEnabled] %CSIDL_PUBLIC%\Libraries [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer [SmartScreenEnabled] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer [AicEnabled] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows[appsFolder.itemdata-ms] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows[appsFolderLayout.bin] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\Application Shortcuts\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\RoamingTiles\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\RoamedTileImages\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\Application Shortcuts\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\RoamingTiles\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows[appsFolder.itemdata-ms] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows[appsFolderLayout.bin] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\Application Shortcuts\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\RoamingTiles\*[*] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\RoamedTileImages\*[*] %CSIDL_APPDATA%\Microsoft\Windows\Recent\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU\* [*] %CSIDL_APPDATA%\Microsoft\Windows\Recent\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\* [*] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\* [*] %ProgramData%\Microsoft\Windows\SystemData\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\S-1-5-18\* [*] %ProgramData%\Microsoft\Windows\SystemData\S-1-5-18\* [*] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.Powershell\* [*] HKLM\SOFTWARE\Classes\Drive\shell\Powershell\* [*] HKLM\SOFTWARE\Classes\Directory\shell\Powershell\* [*] HKLM\SOFTWARE\Classes\Directory\background\shell\Powershell\* [*] HKLM\SOFTWARE\Classes\Drive\shell\cmd\* [*] HKLM\SOFTWARE\Classes\Directory\shell\cmd\* [*] HKLM\SOFTWARE\Classes\Directory\background\shell\cmd\* [*] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\$\AnyoneRead\Colors [ShouldOverrideUserTheme] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\* [*] Appearance_and_Display\Personalized_Settings