ShellBags Explorer Has Explored Data Missing in NTUSER

[chadtilbury]

ShellBags explorer does not appear to accurately display "Has Explored" values when parsing the NTUSER hive. I'm guessing this might be because the Bags key in the NTUSER hive is in a slightly different place: NTUSER\SOFTWARE\Microsoft\Windows\Shell\Bags vs. USRCLASS\Local Settings\Software\Microsoft\Windows\Shell\Bags\15 (no Local Settings key).

[randomaccess3]

Would also be great to get the timestamp of the relevant Bags key into the sbecmd output as this could be another interaction timestamp