Farbar Recovery Scan Tool (x64) Version: 25-03-2022
Exécuté par didie (25-03-2022 18:16:02)
Exécuté depuis C:\Users\didie\Desktop
Mode d'amorçage: Normal

================== Chercher Fichiers: "SearchAll: kaspersky" =============

Fichier:
========
C:\FRST\Quarantine\C\Windows\System32\winevt\Logs\Kaspersky Event Log.evtx.xBAD
[2020-06-24 14:26][2022-03-24 12:13] 001052672 _____ () 1730EB81C4390DD6006CB4F5A721CC92 [Fichier non signé]

C:\FRST\Quarantine\C\Windows\Prefetch\KASPERSKY 03 2022STARTUP.EXE-B00BE3F3.pf.xBAD
[2022-03-11 16:39][2022-03-11 16:49] 000054826 _____ () E78570153D75ECF9813445908C21581C [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Windows\Start Menu\Kaspersky Total Security.lnk.xBAD
[2022-03-11 16:57][2022-03-11 16:57] 000002399 _____ () F51D91EE74C7DFC7D448314C8598A386 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Windows\Recent\Kaspersky secure connection 1 an Code.docx.lnk.xBAD
[2020-07-14 08:19][2020-07-14 08:19] 000000568 _____ () B5F725E729D559EFB4D9EE41D146EC09 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Windows\Recent\Kaspersky suppression abo VPN 24 03 2022.pdf.lnk.xBAD
[2022-03-24 10:03][2022-03-24 10:03] 000000937 _____ () 8FB6C6AFA495BA7032BCE8A0B38943BF [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Windows\Recent\Kaspersky Total Security 2PC 2 Ans 33 € 05 12 2021 .docx.lnk.xBAD
[2022-02-17 14:31][2022-02-17 14:31] 000001230 _____ () AC361E86C4AA42ACA27E1A1C7FA48F85 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Windows\Recent\windowsdefender--update_av-Kaspersky Internet Security.lnk.xBAD
[2019-05-01 09:30][2019-05-01 09:30] 000000228 _____ () 475EB4BBF54066503C0968AB3CDBC214 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Tombstones\Kaspersky Total Security (3).lnk.xBAD
[2022-03-24 12:10][2022-03-11 16:50] 000002196 _____ () EFC381F77F845C96AB2CC28830159978 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\KasperskyLab_Kis_UI_Toasts.xBAD
[2022-03-21 10:41][2022-03-21 10:41] 000037014 _____ () FC962B5BEA16A7755DCF3DCCD62D15A9 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\KasperskyLab_Ksde_UI_Toasts.xBAD
[2022-03-21 10:41][2022-03-21 10:41] 000037014 _____ () 3A103C8E3A5BB982A9F11D1135BF8AE8 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Kaspersky Lab_Kaspersky Password Manager 9_0_2_help_url.xBAD
[2022-03-21 15:10][2022-03-21 15:10] 000037014 _____ () EA0FA6ECD6D7DB8A48FE4C04E69D74A3 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Kaspersky Lab_Kaspersky Password Manager 9_0_2_kpc_url.xBAD
[2022-03-21 15:10][2022-03-21 15:10] 000037014 _____ () EA0FA6ECD6D7DB8A48FE4C04E69D74A3 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Kaspersky Lab_Kaspersky Password Manager 9_0_2_kpm_exe.xBAD
[2022-03-21 10:41][2022-03-21 10:41] 000037014 _____ () 8915EAD0BB2B1AB64FF3C28CE0314554 [Fichier non signé]

C:\FRST\Quarantine\C\Users\didie\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\150\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}_Kaspersky Lab_Kaspersky VPN 5_3_kl_url.xBAD
[2022-03-21 15:10][2022-03-21 15:10] 000037014 _____ () EA0FA6ECD6D7DB8A48FE4C04E69D74A3 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Confirm. AVANT 30 03 2022.pdf.xBAD
[2021-12-05 17:02][2021-12-05 17:02] 001096762 _____ () 503203B964B08C0835E280FB99B856F0 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Internet Suite Facture 1 an 24 01 2021 .pdf.xBAD
[2021-02-02 15:45][2021-02-02 15:45] 000994809 _____ () 0C36FBD2AEBB6B19A9C94C9612B13E72 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky secure connection 1 an Code.docx.xBAD
[2020-07-14 07:55][2020-07-17 20:03] 000015710 _____ () D60652DF3E2FAC312C7EA27A4A2E3ACA [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky secure connection 14 07 2020 abt 1 an 5 app Facture-FR-20-001168719.pdf.xBAD
[2020-07-14 07:53][2020-07-14 07:52] 000051268 _____ () 0AD3A72C0156846CC945D40C35554A8C [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky secure connection 14 07 2020 CGV.pdf.xBAD
[2020-07-14 07:52][2020-07-14 07:51] 000027041 _____ () 7BAEB7BA42E9EF3EDBC7C5DBD49329F1 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky suppression abo VPN 24 03 2022.pdf.xBAD
[2022-03-24 10:03][2022-03-24 10:03] 000401102 _____ () 8997CF3D64F9FD9E74E95B7F1914DF44 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Total Security 2 PC, 2 ans clé code 05 12 2021.pdf.xBAD
[2022-02-17 14:32][2021-12-05 11:28] 000496105 _____ () 90A54065EA38BFFFB634CD016CEE2FAA [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Total Security 2PC 2 Ans 33 € 05 12 2021 .docx.xBAD
[2021-12-05 16:51][2021-12-06 20:05] 000030950 _____ () D5C8688C8ACBA3A3140C9E4E75F69EEF [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Veepee 2 PC, 2 ans titre de reservation 5 12 2021 vp381074252.pdf.xBAD
[2021-12-05 16:46][2021-12-05 16:47] 000139559 _____ () F163565F2ACCE91CAC222C45FC5568B6 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Veepee 5 12 2021 Conditions_Generales_de_Vente.pdf.xBAD
[2021-12-05 16:43][2021-12-05 16:43] 001884960 _____ () 06795D27A9BA9F96B68BB122A5AE093A [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Kaspersky Veepee Titre de réservation 2 PC,2 ans 5 12 2021 vp381074252.pdf.xBAD
[2022-02-17 14:32][2021-12-05 11:28] 000139560 _____ () 9A3DD512FB7644E8A3B83291AD40C3B0 [Fichier non signé]

C:\FRST\Quarantine\C\DOSSIERS DF\INFORMATIQUE\Sécurité Kaspersky Virus Removal Tool 15.docx.xBAD
[2020-07-03 13:58][2015-04-09 17:20] 000077187 _____ () ECCF922E01080E4EB3BB5D698CDF1708 [Fichier non signé]

C:\DOSSIERS DF\INFORMATIQUE\Kaspersky 03 2022startup.exe
[2022-03-11 16:37][2022-03-11 16:38] 002766168 _____ (Kaspersky) DD345ACE7FFCA37C3F50DCD13B458F5E [Le fichier est signé numériquement]

C:\DOSSIERS DF\INFORMATIQUE\Kaspersky Virus Removal Tool TUTO.docx
[2020-07-03 13:57][2017-06-27 08:34] 000305143 _____ () 37D2DDF4687A5759B88DD0703663D912 [Fichier non signé]


dossier:
========
2020-12-31 10:44 - 2020-12-31 10:44 _____ C:\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\browser-extension-data\light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com
2021-10-23 08:03 - 2021-10-23 08:03 _____ C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\storage\default\https+++my.kaspersky.com
2022-03-24 10:07 - 2022-03-24 10:07 _____ C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\storage\default\https+++shop.kaspersky.fr
2021-09-24 13:13 - 2021-09-24 13:13 _____ C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\storage\default\https+++support.kaspersky.com
2020-07-14 05:52 - 2022-02-19 08:57 _____ C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\storage\default\https+++www.kaspersky.fr
2021-03-18 09:07 - 2021-03-18 09:07 _____ C:\FRST\Quarantine\C\Users\didie\AppData\Roaming\Mozilla\Firefox\Profiles\op7fscs2.default-1560858468662\browser-extension-data\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com
2020-12-31 10:47 - 2020-12-31 10:47 _____ C:\FRST\Quarantine\C\Users\Default\AppData\Local\Kaspersky Lab
2020-12-31 10:47 - 2020-12-31 10:47 _____ C:\FRST\Quarantine\C\Users\Default\AppData\Local\Kaspersky Lab\Kaspersky Password Manager
2018-03-10 17:18 - 2022-03-24 12:11 _____ C:\FRST\Quarantine\C\ProgramData\Kaspersky Lab
2018-03-10 17:18 - 2022-03-11 16:49 _____ C:\FRST\Quarantine\C\ProgramData\Kaspersky Lab Setup Files
2020-07-14 06:03 - 2020-07-14 06:03 _____ C:\FRST\Quarantine\C\ProgramData\Kaspersky Lab\SafeBrowser\kis\S-1-5-21-2649651565-1698925224-1208749450-1001\FireFox\storage\default\https+++shop.kaspersky.fr
2018-03-10 17:18 - 2022-03-24 12:11 _____ C:\FRST\Quarantine\C\Program Files (x86)\Kaspersky Lab
2020-12-31 10:47 - 2022-03-24 12:08 _____ C:\FRST\Quarantine\C\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2

Registre:
========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}]
"REPORTINGEXE"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\Kaspersky Lab\Kaspersky Password Manager\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\resources\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\resources\neutral\images\database\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\resources\neutral\images\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\resources\neutral\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\resources\neutral\images\main_window\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\Kaspersky Lab\Kaspersky Password Manager\Data\Agreements\locAgreements\en\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\Kaspersky Lab\Kaspersky Password Manager\Data\Agreements\locAgreements\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\Kaspersky Lab\Kaspersky Password Manager\Data\Agreements\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributes"="{
"Version": 171,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale",
"f:FlightingBranchName",
"r:OEMMode"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar",
"r:WSX_Windows_Settings_Account",
"r:InstallDate",
"r:WSX_Runtime"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2",
"r:AndroidUserOptinValue",
"f:FlightingBranchName",
"f:FlightRing",
"r:CurrentBranch"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID",
"r:AndroidUserOptinValue"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab",
"c:PrimaryDiskType"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"PHS": [
"r:GridZoneName"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds",
"r:WSX_Runtime"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey",
"r:Win11UpgradeAcceptedTimestamp"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AndroidUserOptinValue": {
"HKey": "HKEY_CURRENT_USER",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\",
"ValueName": "OptedIn",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GridZoneName": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS",
"ValueName": "GridZoneName",
"RegValueType": "REG_SZ"
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM",
"ValueName": "OOBEMode",
"RegValueType": "REG_SZ"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"Win11UpgradeAcceptedTimestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD"
},
"Win11UpgradeAcceptedWUSeeker": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Runtime": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "ExperienceExtensions",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributesVerified"="{
"Version": 171,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale",
"f:FlightingBranchName",
"r:OEMMode"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar",
"r:WSX_Windows_Settings_Account",
"r:InstallDate",
"r:WSX_Runtime"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2",
"r:AndroidUserOptinValue",
"f:FlightingBranchName",
"f:FlightRing",
"r:CurrentBranch"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID",
"r:AndroidUserOptinValue"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab",
"c:PrimaryDiskType"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"PHS": [
"r:GridZoneName"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds",
"r:WSX_Runtime"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey",
"r:Win11UpgradeAcceptedTimestamp"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AndroidUserOptinValue": {
"HKey": "HKEY_CURRENT_USER",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\",
"ValueName": "OptedIn",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GridZoneName": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS",
"ValueName": "GridZoneName",
"RegValueType": "REG_SZ"
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM",
"ValueName": "OOBEMode",
"RegValueType": "REG_SZ"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"Win11UpgradeAcceptedTimestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD"
},
"Win11UpgradeAcceptedWUSeeker": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Runtime": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "ExperienceExtensions",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\AVP20.0]
"Path.Win32"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\klvssbridge64_20.0]
"DisplayName"="Kaspersky Volume Shadow Copy Service Bridge 20.0"
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\Upgrade\NetworkDriverBackup\Control\NetworkSetup2\Interfaces\{0CA564FD-FB3C-4DFE-A533-85425D107F14}\Kernel]
"IfDescr"="Kaspersky Security Data Escort Adapter"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions]
"Kaspersky Security Data Escort Adapter"="2"
[HKEY_USERS\S-1-5-21-2649651565-1698925224-1208749450-1001\SOFTWARE\IvoSoft\ClassicStartMenu\MRU]
"22"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection\Kaspersky Secure Connection.lnk"


====== Fin de Chercher ======