Farbar Recovery Scan Tool (x64) Version: 15-04-2022 Ran by [removed] (17-04-2022 07:19:21) Running from C:\Users\[removed]\Downloads Boot Mode: Normal ================== Search Files: "SearchAll:Norton;McAfee;Net-Peeker;eMing" ============= File: ======== C:\Windows.old\Users\Public\Desktop\Net-Peeker 4.5.LNK [2022-03-24 04:24][2022-04-09 01:00] 000001129 _____ () ABA8462AF7A5EF19F70CD5E006B58D88 [File not signed] C:\Windows.old\Users\Eldritch\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Net-Peeker 4.5.LNK [2022-03-24 04:29][2022-03-24 04:24] 000001147 _____ () 5D5F9546FEC43DC5B0E2C90CDBB419A4 [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\McAfee_McAgent [2020-12-25 03:26][2020-12-25 03:26] 000037014 _____ () EB34F26246CA1F7F18C4D750A821A20B [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\NortonLifeLock_Norton Security [2021-04-29 04:44][2021-04-29 04:44] 000037014 _____ () 64A521E7798321026532B0CAFD0D572B [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\Symantec_Norton 360 [2021-06-28 19:27][2021-06-28 19:27] 000037014 _____ () 9A44793508477DFEC6E8F98F4523BCF0 [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\Symantec_PE_NortonSecurityScan [2021-06-29 00:55][2021-06-29 00:55] 000037014 _____ () 8DC5C893A2E0C3E17CCAE837974E951C [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\NortonLifeLock_Norton Security [2022-01-18 20:32][2022-01-18 20:32] 000037014 _____ () 64A521E7798321026532B0CAFD0D572B [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Symantec_Norton Security [2022-03-29 05:59][2022-03-29 05:59] 000037014 _____ () 7C9A275D1CDD0DDFAEAF28A09E586BAC [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Symantec_PE_NortonSecurityScan [2022-01-18 20:32][2022-01-18 20:32] 000037014 _____ () 8DC5C893A2E0C3E17CCAE837974E951C [File not signed] C:\Windows.old\Users\Eldritch\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_NetPeeker_Net-Peeker_chm [2022-02-19 05:33][2022-02-19 05:33] 000037014 _____ () 00DC6C6C39759D28317C96A4A69A7022 [File not signed] C:\Windows\System32\Tasks_Migrated\McAfee Remediation (Prepare) [2018-01-16 22:41][2018-01-16 22:41] 000003442 _____ () F2E790D8B9F1D1DDF55BEA74B963047C [File not signed] C:\Windows\System32\Tasks_Migrated\McAfeeLogon [2018-01-16 22:42][2018-01-16 22:48] 000003142 _____ () B9A90F2E7832292613ECB3E55B19C08F [File not signed] C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Auto Maintenance Task Agent [2018-01-16 22:41][2018-01-16 22:41] 000003470 _____ () 30B9F2E0729E9E5980E4423C6FDDB789 [File not signed] C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Idle Detection Task [2018-01-16 22:41][2018-01-16 22:41] 000003232 _____ () [Access Denied] C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.1620.1.10\amd64_microsoft-windows-theming-sc-deployment_31bf3856ad364e35_10.0.19041.1620_none_18d3c700895e174a.manifest [2022-04-10 13:48][2022-03-13 00:32] 000001862 ____N () C577611F58B1674F6CAC61F73766CAD3 [File not signed] C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.1620.1.10\Microsoft-Windows-Theming-SC-Package~31bf3856ad364e35~amd64~~10.0.19041.1620.cat [2022-04-10 13:40][2022-03-13 01:03] 000017917 ____N () E681AADE10DE9748FF246B610B84B20C [File is digitally signed] C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.1620.1.10\Microsoft-Windows-Theming-SC-Package~31bf3856ad364e35~amd64~~10.0.19041.1620.mum [2022-04-10 13:52][2022-03-12 15:02] 000000842 ____N () 98A7AF97CE83ED990980ECEF20435CD5 [File not signed] C:\Windows\prefetch\NORTONNSDOWNLOADER.EXE-8CC4F1B3.pf [2022-04-09 20:09][2022-04-09 22:08] 000012124 _____ () CE3A155126B90E5E3E08C1775FB0129E [File not signed] C:\Windows\prefetch\NORTONSECURITY.EXE-7F1A9722.pf [2022-04-09 23:31][2022-04-09 23:35] 000027970 _____ () 1A185EA9A05BE3B54F869003B7975033 [File not signed] C:\Windows\prefetch\NORTONSECURITY.EXE-E8972347.pf [2022-04-17 06:15][2022-04-17 06:15] 000010993 _____ () 254C9EB6242CA301AC1D0DD8D30A1A5F [File not signed] C:\Users\Eldritch\Downloads\Bandwidth managers\Net-Peeker.Group.3.50.1177 [30] (last installed 4-9-22).exe [2021-01-01 09:02][2013-07-24 23:36] 011336888 _____ () BA479746E4AE33CD4D2B14F7FBE8683D [File is digitally signed] C:\Users\Eldritch\Downloads\Bandwidth managers\Net-Peeker.Personal.4.0.0.1383 [30].exe [2017-06-05 21:32][2021-01-01 08:59] 014427344 _____ () FD6DA1FE216BF635C2D4099E5AF94972 [File is digitally signed] C:\Users\Eldritch\Downloads\Bandwidth managers\Net-Peeker.Personal.4.5.1.1453.exe [2021-12-04 15:57][2022-02-18 15:23] 013941480 _____ () E1F6C1F939FE1A9411725E9BE117FFB1 [File is digitally signed] C:\Users\Eldritch\Documents\norton.png [2022-03-30 21:45][2022-04-01 19:52] 000011920 _____ () D5ACF86C0F0D0B3161984ED3F37141E6 [File not signed] C:\Users\Eldritch\AppData\Roaming\Microsoft\Windows\Recent\Norton.lnk [2022-04-11 03:11][2022-04-11 03:53] 000000563 _____ () 4FA37EF42AB608308D6E38E811D020BB [File not signed] C:\Users\Eldritch\AppData\LocalLow\Norton\ba91d3cb-409c-4308-b33f-ff2254c662b6\Message\nortonOnDark.png [2021-08-26 07:27][2021-09-01 11:30] 000010816 _____ () 1F6D5B62EF2400CEB49BF3BED41611B7 [File not signed] C:\Users\Eldritch\AppData\LocalLow\Norton\81becba6-740a-4e03-8677-92a1ea27f4ce\Message\Norton-Horizontal-Dark.png [2021-07-02 04:06][2021-07-04 04:09] 000012400 _____ () 134E0E2836B5D6707A7FAFDC76553D6C [File not signed] C:\Users\Eldritch\AppData\LocalLow\Norton\81becba6-740a-4e03-8677-92a1ea27f4ce\Message\Norton-Horizontal-Light.png [2021-07-02 04:06][2021-07-04 04:09] 000010784 _____ () ADA9C51AB32E28532A686E1FEE1F3A6E [File not signed] C:\SYSTEM.SAV\logs\BB\McAfee.txt [2018-01-16 22:41][2018-01-16 22:51] 000000205 _____ () 83D8A16D95829E0563B78B76261555EF [File not signed] C:\SYSTEM.SAV\logs\BB\[FCC]_McAfee_-_MLS.LOG [2018-01-16 22:41][2018-01-16 22:51] 000000668 _____ () B9D8ACA5C05E3705330DBF51612D7FE3 [File not signed] C:\SYSTEM.SAV\logs\BB\[FCC]_McAfee_Checkbox.LOG [2018-01-16 22:26][2018-01-16 22:26] 000000654 _____ () D0B2D515BBF2AB4E821B4E6024E382B5 [File not signed] C:\SYSTEM.SAV\logs\BB\[FCC]_McAfee_LiveSafe_Install_Rules_Configuration.LOG [2018-01-16 22:26][2018-01-16 22:26] 000000711 _____ () C339967A1405F5859269AAEF0FACDC8C [File not signed] C:\ProgramData\Intel\ShaderCache\NortonSecurity_1 [2022-04-09 22:30][2022-04-10 00:50] 000009834 _____ () C14439E76960F049EFD95B518A538F3E [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\mcafee.css [2018-01-16 22:40][2018-01-16 22:40] 000003332 _____ () 684401B98D24A849DB1EA746F4025607 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\mcafee.html [2018-01-16 22:40][2018-01-16 22:40] 000013381 _____ () DD3E3DEB980829BABA8C820F99081C49 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\mcafee.js [2018-01-16 22:40][2018-01-16 22:40] 000009965 _____ () C6B26BD7B07CD6F021E95AFC64F44470 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\omen_mcafee.css [2018-01-16 22:40][2018-01-16 22:40] 000003512 _____ () 152BCF6658AC45719DBB4A6FC9774768 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\resources\McAFEE_H_RGB_REV_530.png [2018-01-16 22:40][2018-01-16 22:40] 000009351 _____ () 2DF82142323B074B004EEB6D8D479B96 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ar.json [2018-01-16 22:40][2018-01-16 22:40] 000001024 _____ () 3DB80E0FD7BDDF3E2CCFD083C3083B29 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-bg.json [2018-01-16 22:40][2018-01-16 22:40] 000001198 _____ () 2B7E3E90BBB26F02E56418DE6D557080 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ca.json [2018-01-16 22:40][2018-01-16 22:40] 000000831 _____ () 9276A21A22C7AB0247E897D2FAC4EBAF [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-cs.json [2018-01-16 22:40][2018-01-16 22:40] 000000853 _____ () 4DF22C515BC17F779029A8DFE7A45BF6 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-da.json [2018-01-16 22:40][2018-01-16 22:40] 000000788 _____ () 36EC46CBBA921FB104B0B3D746AEC3E3 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-de.json [2018-01-16 22:40][2018-01-16 22:40] 000000795 _____ () AF871F023E18D7BA949FD72B47222D94 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-el.json [2018-01-16 22:40][2018-01-16 22:40] 000001152 _____ () 092085AC22CBE9ACEA4262A2A6A5FCC1 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-en-gb.json [2018-01-16 22:40][2018-01-16 22:40] 000000752 _____ () 113673E6BF4E80CC8643578F675CE0AA [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-en-us.json [2018-01-16 22:40][2018-01-16 22:40] 000000752 _____ () 113673E6BF4E80CC8643578F675CE0AA [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-en.json [2018-01-16 22:40][2018-01-16 22:40] 000000752 _____ () 113673E6BF4E80CC8643578F675CE0AA [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-es-ar.json [2018-01-16 22:40][2018-01-16 22:40] 000000831 _____ () 4C563A44C098EAB8C7317193C2927B29 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-es-es.json [2018-01-16 22:40][2018-01-16 22:40] 000000844 _____ () 4F8614C648B73243829175728B54393A [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-es-mx.json [2018-01-16 22:40][2018-01-16 22:40] 000000831 _____ () 4C563A44C098EAB8C7317193C2927B29 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-es.json [2018-01-16 22:40][2018-01-16 22:40] 000000831 _____ () 4C563A44C098EAB8C7317193C2927B29 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-et.json [2018-01-16 22:40][2018-01-16 22:40] 000000795 _____ () 735A86DB76EAEEBC4C3AA8BA0E1C0F10 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-eu-es.json [2018-01-16 22:40][2018-01-16 22:40] 000000816 _____ () CAE9F6F27957D3F6B8A7B477562785DF [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-eu.json [2018-01-16 22:40][2018-01-16 22:40] 000000816 _____ () CAE9F6F27957D3F6B8A7B477562785DF [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-fi.json [2018-01-16 22:40][2018-01-16 22:40] 000000788 _____ () FFE85D79F7C29AA5B4C074BBDC9EEDB9 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-fr-ca.json [2018-01-16 22:40][2018-01-16 22:40] 000000906 _____ () 31134AD2CE2ADDBD249EBF1A45BE386A [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-fr.json [2018-01-16 22:40][2018-01-16 22:40] 000000914 _____ () F2181122B00097FE099F7A26391B0833 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-gl-es.json [2018-01-16 22:40][2018-01-16 22:40] 000000853 _____ () 1523380649D3262606C5FAF1C56D74F6 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-gl.json [2018-01-16 22:40][2018-01-16 22:40] 000000853 _____ () 1523380649D3262606C5FAF1C56D74F6 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-he.json [2018-01-16 22:40][2018-01-16 22:40] 000000938 _____ () 7E745E4C7D1A26FF293C943B85CC74D7 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-hr.json [2018-01-16 22:40][2018-01-16 22:40] 000000797 _____ () B6BCBEC0A9FA33883167FBE7FA994703 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-hu.json [2018-01-16 22:40][2018-01-16 22:40] 000000840 _____ () 5685FCEB698D5899A5EBFC78AFC937D5 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-it.json [2018-01-16 22:40][2018-01-16 22:40] 000000817 _____ () A6959F16F605DBAEBFF3D24764867C41 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ja.json [2018-01-16 22:40][2018-01-16 22:40] 000000925 _____ () 32F6134DA44A7B5866C85A9405EADA6F [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ko.json [2018-01-16 22:40][2018-01-16 22:40] 000000848 _____ () BB364A4B234054B910B3122CF8545963 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-lt.json [2018-01-16 22:40][2018-01-16 22:40] 000000892 _____ () BA718FBCCAE2DA651BE9CF6EF3CF7F8E [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-lv.json [2018-01-16 22:40][2018-01-16 22:40] 000000856 _____ () 9D097C167F53F903FCA044973B9FCCF7 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-nb.json [2018-01-16 22:40][2018-01-16 22:40] 000000808 _____ () 2B9CE376D978EB5110900AC2F3F1F779 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-nl.json [2018-01-16 22:40][2018-01-16 22:40] 000000817 _____ () CCF573410643402C6323756F8E745CD6 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-pl.json [2018-01-16 22:40][2018-01-16 22:40] 000000866 _____ () 5778BB896A67EC873EB8A420A20A01BE [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-pt-br.json [2018-01-16 22:40][2018-01-16 22:40] 000000786 _____ () B144CD26F00479F4B90F17ECAEE6B9D1 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-pt-pt.json [2018-01-16 22:40][2018-01-16 22:40] 000000804 _____ () 809F48EFB12F83FCFF94B05117273644 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-pt.json [2018-01-16 22:40][2018-01-16 22:40] 000000786 _____ () B144CD26F00479F4B90F17ECAEE6B9D1 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ro.json [2018-01-16 22:40][2018-01-16 22:40] 000000883 _____ () 0CB3A794A26B4944BFF1195F6E8A57C6 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-ru.json [2018-01-16 22:40][2018-01-16 22:40] 000001322 _____ () EE9B817672045F8E3730B69B977088BD [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-sk.json [2018-01-16 22:40][2018-01-16 22:40] 000000862 _____ () FA718FACF8957053CED5F2B1AD4232A7 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-sl.json [2018-01-16 22:40][2018-01-16 22:40] 000000826 _____ () 8FEF7FE86617FA714FEFDD85C374AF7F [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-sr.json [2018-01-16 22:40][2018-01-16 22:40] 000000790 _____ () 0D50B375FE8A0010C733F5A81C4B1463 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-sv.json [2018-01-16 22:40][2018-01-16 22:40] 000000805 _____ () CF9F1BC1320AEC4E95C6F35814BAEA20 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-th.json [2018-01-16 22:40][2018-01-16 22:40] 000001468 _____ () 314245E05E15714446ED0EAFCA8C1266 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-tr.json [2018-01-16 22:40][2018-01-16 22:40] 000000815 _____ () A120B47EBC5D1513B95B33D67C8FE380 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-zh-cn.json [2018-01-16 22:40][2018-01-16 22:40] 000000754 _____ () 8F3811E0F656DD9190CDA3BA19035122 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-zh-hk.json [2018-01-16 22:40][2018-01-16 22:40] 000000763 _____ () DD888ADBBD246E540651CDE46335617E [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-zh-tw.json [2018-01-16 22:40][2018-01-16 22:40] 000000726 _____ () 741C75A722ACA3D0D12E147D941CB6C9 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee-zh.json [2018-01-16 22:40][2018-01-16 22:40] 000000754 _____ () 8F3811E0F656DD9190CDA3BA19035122 [File not signed] C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee\localization\lang\mcafee.json [2018-01-16 22:40][2018-01-16 22:40] 000000752 _____ () 113673E6BF4E80CC8643578F675CE0AA [File not signed] folder: ======== 2021-12-27 11:02 - 2021-12-27 11:02 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\extensions\staged\[removed] 2021-12-27 11:02 - 2021-12-27 11:02 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\extensions\staged\[removed] 2021-12-27 11:01 - 2021-12-27 11:01 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\extensions\staged\[removed] 2021-12-27 11:55 - 2021-12-27 11:55 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\browser-extension-data\[removed] 2021-12-27 11:55 - 2021-12-27 11:55 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\browser-extension-data\[removed] 2021-12-27 11:55 - 2021-12-27 11:55 _____ C:\Windows.old\Users\Eldritch\AppData\Roaming\Mozilla\Firefox\Profiles\sm00eg3n.default-release\browser-extension-data\[removed] 2021-12-22 17:30 - 2021-12-22 17:30 _____ C:\Windows.old\Users\Eldritch\AppData\Local\Norton 2022-04-09 08:32 - 2022-04-09 08:36 _____ C:\Windows.old\Users\Eldritch\AppData\Local\Temp\NortonInstall 2021-12-22 17:17 - 2021-12-22 17:17 _____ C:\Windows.old\Users\Eldritch\AppData\Local\Packages\NortonSecurity_cjtsyd8xszapp 2018-01-16 22:41 - 2022-04-09 11:52 _____ C:\Windows\System32\Tasks_Migrated\McAfee 2022-04-17 06:05 - 2022-04-17 06:05 _____ C:\Windows\System32\Tasks\McAfee 2018-08-26 04:26 - 2020-08-28 03:06 ___RS C:\Users\Eldritch\Documents\McAfee Vaults 2021-07-02 04:06 - 2021-08-26 07:27 _____ C:\Users\Eldritch\AppData\LocalLow\Norton 2022-04-16 18:03 - 2022-04-16 18:03 _____ C:\Users\Eldritch\AppData\Local\Norton 2018-01-16 22:41 - 2018-01-16 22:46 _____ C:\SYSTEM.SAV\logs\[FCC]_McAfee_-_MLS 2018-01-16 22:26 - 2018-01-16 22:26 _____ C:\SYSTEM.SAV\logs\[FCC]_McAfee_Checkbox 2018-01-16 22:26 - 2018-01-16 22:26 _____ C:\SYSTEM.SAV\logs\[FCC]_McAfee_LiveSafe_Install_Rules_Configuration 2022-04-09 14:00 - 2022-04-17 06:39 _____ C:\ProgramData\Norton 2022-04-09 13:21 - 2022-04-09 13:21 _____ C:\ProgramData\NortonInstaller 2022-03-24 04:24 - 2022-04-09 20:30 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Net-Peeker 2021-06-28 23:46 - 2021-06-28 23:46 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan 2022-04-10 02:22 - 2022-04-10 02:22 _____ C:\Program Files\WindowsApps\ad2f1837.hpjumpstart_1.4.443.0_x86__v10z8vjag6ke6\WebSources\Content\Pages\mcafee 2018-01-16 22:26 - 2018-01-16 22:26 _____ C:\hp\McAfeeRules Registry: ======== ===================== Search result for "Norton" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32] ""="C:\Program Files\Norton Security\Engine\22.22.3.9\uiWNSNotificationApp.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32] ""="C:\Program Files\Norton Security\Engine\22.22.3.9\symamsi.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\file\ShellEx\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu\CurVer] ""="NortonLifeLock.Norton.Antivirus.IEContextMenu.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonSCU.ToolManagerImpl] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\0\win32] ""="C:\Program Files\Norton Security\Engine32\22.22.3.9\ToolLib.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\HELPDIR] ""="C:\Program Files\Norton Security\Engine32\22.22.3.9\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}] "LocalizedString"="@C:\Program Files\Norton Security\Engine32\22.22.3.9\nuPerfScan.exe,-101" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\InprocServer32] ""="C:\PROGRA~1\NORTON~1\Engine32\22223~1.9\ToolLib.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\ProgID] ""="NortonSCU.ToolManagerImpl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32] ""="C:\Program Files\Norton Security\Engine32\22.22.3.9\symamsi.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\Compatibility\NortonSystemInfo] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\NortonSecurity.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{53C7D717-52E2-B95E-FA61-6F32ECC805DB}] "DISPLAYNAME"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{53C7D717-52E2-B95E-FA61-6F32ECC805DB}] "PRODUCTEXE"="C:\Program Files (x86)\Norton Security\Engine\22.5.4.24\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{53C7D717-52E2-B95E-FA61-6F32ECC805DB}] "REPORTINGEXE"="C:\Program Files (x86)\Norton Security\Engine\22.5.4.24\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "DISPLAYNAME"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.22.3.9\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.22.3.9\nsWscSvc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{6BFC5632-188D-B806-D13E-C607121B42A0}] "DISPLAYNAME"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{6BFC5632-188D-B806-D13E-C607121B42A0}] "PRODUCTEXE"="C:\Program Files (x86)\Norton Security\Engine\22.5.4.24\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{6BFC5632-188D-B806-D13E-C607121B42A0}] "REPORTINGEXE"="C:\Program Files (x86)\Norton Security\Engine\22.5.4.24\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "DISPLAYNAME"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.22.3.9\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.22.3.9\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Arestore.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\asOELnch.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\BHCA.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buIH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buVss.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ccSEUPDT.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\chrome.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CLTLMH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cltRT.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coExport.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coInst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coNatHst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CpySnt.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cscript.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dcStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dllhost.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dll_register_server.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DNLP0808.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\EFAInst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ehmsas.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Elaminst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\excel.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\explorer.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\firefox.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\GEARDIFx.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ieuser.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\iexplore.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstCA.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\IPSDgnHC.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MCUI32.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msaccess.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msimn.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\navw32.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ncolow.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nsWscSvc.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nuPerfScan.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\outlook.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powerpnt.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powershell.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ruleup.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevinst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevntx64.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\srtsp_ca.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\sshelper.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\syknlu.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymDgnHC.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymErr.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymHTMLHost.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymIMI64.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\symimins.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\tuIH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\uistub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\visio.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\VPNService.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wfpunins.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winproj.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winword.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wscript.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\WSCStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.21.1.151\Definitions\IPSDefs\20210625.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.21.1.151\Definitions\IPSDefs\20210105.001\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{F1C841D3-35C5-49A2-8153-2A72BB923EF6}\NortonData\22.21.1.151\Definitions\IPSDefs\20210105.001\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{FA40B278-78EB-4BF6-8F94-37768DCC702A}\NortonData\22.21.5.44\Definitions\IPSDefs\20210415.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{7A45E258-6A14-45AB-9569-C9F48C8A4DF0}\NortonData\22.21.1.151\Definitions\IPSDefs\20210105.001\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{886195D6-B62A-4AF1-BDEF-375FA4E8DD5C}\NortonData\22.21.1.151\Definitions\IPSDefs\20210625.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{886195D6-B62A-4AF1-BDEF-375FA4E8DD5C}\NortonData\22.21.5.44\Definitions\IPSDefs\20210415.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{9702782C-F9B1-4158-B972-64C911CFE19D}\NortonData\22.21.5.44\Definitions\IPSDefs\20210927.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{6BC16D3B-3B4C-479D-81BC-27E7A3597DAF}\NortonData\22.21.1.151\Definitions\IPSDefs\20210105.001\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{ABA85F5A-8A5C-4772-9F01-D0EF01CEE171}\NortonData\22.21.8.62\Definitions\IPSDefs\20211224.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files (x86)\Norton 360\NortonData\22.5.2.15\Definitions\IPSDefs\20211227.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files (x86)\Norton 360\NortonData\22.20.5.40\Definitions\IPSDefs\20200717.500\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{12AEB001-9895-4E02-8156-4D24F66ED236}\NortonData\22.21.11.46\Definitions\IPSDefs\20220323.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{807C8B9F-8FE4-47D1-829F-A5FF0BC40BDF}\NortonData\22.19.8.65\Definitions\IPSDefs\20190809.500\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\{410630AD-0816-477C-8EE8-DAC13121D90B}\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files (x86)\Norton Security\NortonData\22.5.1.7\Definitions\IPSDefs\20220325.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files (x86)\Norton Security\NortonData\22.5.1.7\Definitions\IPSDefs\20220328.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files (x86)\Norton Security\NortonData\22.20.5.40\Definitions\IPSDefs\20220406.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.22.2.10\Definitions\IPSDefs\20220415.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant] "ExecutablesToExclude"="c:\program files (x86)\nortoninstaller\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\ns\562c4dd5\22.5.4.24\inststub.exe C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.22.3.9\InstStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3629E838-7182-4E02-A423-658331FA71EB}] "Author"="NortonLifeLock" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3629E838-7182-4E02-A423-658331FA71EB}] "Description"="NortonLifeLock Antimalware Protection Migration helper. Migrates user settings and license information during the Norton product and the Windows OS upgrades." [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 174, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 174, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Norton] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DirectDraw\Compatibility\NortonSystemInfo] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.22.2.10\Definitions\IPSDefs\20220415.061\IPSEng32.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\Firefox\Extensions] "{EBA722F5-038F-4CAF-9EE2-545A221628BC}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.4.24\coFFPlgn\" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\NS] "EventMessageFile"="C:\Program Files (x86)\Norton Security\MUI\22.5.4.24\09\01\rcSvcHst.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsvst_NGC] "DisplayName"="NortonLifeLock Split Tunneling WFP Callout driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SymEvnt] "ImagePath"="\??\C:\Program Files\Norton Security\NortonData\22.22.2.10\SymPlatform\SymEvnt.sys" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SymEvnt\Parameters] "DefsDir"="C:\Program Files\Norton Security\NortonData\22.22.2.10\Definitions\SymPlatformDefs\20220110.080" [HKEY_USERS\.DEFAULT\Software\Classes\NortonSecurity] [HKEY_USERS\.DEFAULT\Software\Norton] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\AppDataLow\Software\Norton] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE61F2CD8E00054338] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE61F2CD8E00054338] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "Symantec.Norton Security"="29" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "NortonLifeLock.Norton Security"="42" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "C:\Users\Eldritch\Downloads\Norton\NSD_5D_22.5.2_SYMTB_PROMO_19_MRFTT_DD026_14248 [90].exe"="3" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "Symantec.Norton Security"="14" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "C:\Users\Public\Downloads\Norton\{NS-2222210-SHPD-FSD5290004}\NortonNSDownloader.exe"="12" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "NortonLifeLock.Norton Security"="26" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.22.2.10\NPE.exe"="3" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData] "Symantec.Norton Security"="132939593788431263" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData] "NortonLifeLock.Norton Security"="132946212719674824" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Norton] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Classes\Local Settings\MuiCache\18\52C64B7E] "@C:\Program Files\Norton Security\Branding\muis.dll,-601"="Norton Security" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.22.2.10\NortonSecurity.exe"="Norton Security" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Classes\NortonSecurity] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Classes\NortonSecurity] "URL Protocol"="nortonsecurity://show" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Classes\NortonSecurity\shell\open\command] ""="C:\Program Files\Norton Security\Engine\22.22.2.10\uistub.exe /installui" ===================== Search result for "McAfee" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Common Files\McAfee\Sustainability\LamRepair.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 174, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 174, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "{6D809377-6AF0-444B-8957-A3773F02200E}\mcafee\msc\mcuihost.exe"="6" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "McAfee.McAgent"="9" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData] "McAfee.McAgent"="132939568873405694" ===================== Search result for "Net-Peeker" ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{D28FF3CC-2F93-431E-B48F-8CAC4DC373E3}"="v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\NetPeeker\NPConsole.exe|Name=Net-Peeker Console|" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{4CE30AB9-F798-4701-9EA5-8824D3735846}"="v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\NetPeeker\NPConsole.exe|Name=Net-Peeker Console|" [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\eMingSoftware\Net-Peeker Group Console] ===================== Search result for "eMing" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMI\WinSxS Settings\amd64_microsoft-windows-settings_31bf3856ad364e35_none_5e7b0013834d1c8b\10.0.19041.1\Settings] "disableTheming"="xsd:string" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMI\WinSxS Settings\x86_microsoft-windows-settings_31bf3856ad364e35_none_025c648fcaefab55\10.0.19041.1\Settings] "disableTheming"="xsd:string" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\eMingSoftware] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\eMingSoftware] [HKEY_USERS\S-1-5-21-1006872022-3032962147-1773234815-1001\SOFTWARE\eMingSoftware\Net-Peeker Group Console] ====== End of Search ======