HKCR\.ps1\* [*] HKCR\Microsoft.PowerShellScript.1\* [*] HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment[PSModulePath] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1\UserChoice\* [*] %windir%\system32\WindowsPowerShell\v1.0[profile.ps1] %windir%\system32\WindowsPowerShell\v1.0[Microsoft.PowerShell_profile.ps1] %windir%\system32\WindowsPowerShell\v1.0\[Microsoft.PowerShellISE_profile.ps1] %windir%\system32\WindowsPowerShell\v1.0\SessionConfig[*.pssc] %windir%\SysWOW64\WindowsPowerShell\v1.0[profile.ps1] %windir%\SysWOW64\WindowsPowerShell\v1.0[Microsoft.PowerShell_profile.ps1] %windir%\SysWOW64\WindowsPowerShell\v1.0\[Microsoft.PowerShellISE_profile.ps1] %windir%\SysWOW64\WindowsPowerShell\v1.0\SessionConfig[*.pssc] %CSIDL_LOCAL_APPDATA%\Microsoft\Windows\PowerShell\PowerShellGet\* [*] %localappdata%\Microsoft\Windows\PowerShell\ScheduledJobs\* [*] %appdata%\Microsoft\Windows\PowerShell\PSReadline\* [*]