Page 1 of 1

User/System traces

Posted: Sat May 03, 2025 2:04 am
by saad
I think these should be added:

Folders View Settings
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags

Notification Area Icons Cache
HKEY_CURRENT_USER\Control Panel\NotifyIconSettings
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify
IconStreams
PastIconsStream

Start Menu Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UFH\SHC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP

OneDrive Logs
%LOCALAPPDATA%\Microsoft\OneDrive\logs\ListSync\Business1

%LOCALAPPDATA%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\*.cache;*.dat;*.bin