REG: reg query "HKEY_USERS\S-1-5-21-2490165305-1638453623-257508744-1001\Software\Microsoft\Windows\CurrentVersion\Run" /s
REG: reg query "HKEY_USERS\S-1-5-21-2490165305-1638453623-257508744-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce" /s