Farbar Recovery Scan Tool (x64) Version: 04-08-2022
Exécuté par 33658 (10-08-2022 16:07:57)
Exécuté depuis C:\Users\33658\Downloads
Mode d'amorçage: Normal

================== Chercher Fichiers: "SearchAll: mbam;malwarebytes" =============

Fichier:
========
C:\Windows\Temp\mbamiservice.log
[2022-08-10 14:51][2022-08-10 14:54] 000079704 _____ () 14424BEAE6A87AE75778A62830B277C9 [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.cat
[2022-08-10 14:52][2022-08-10 14:52] 000011087 _____ () 60608328775D6ACF03EAAB38407E5B7C [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.inf
[2022-08-10 14:52][2022-08-10 14:52] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.sys
[2022-08-10 14:52][2022-08-10 14:52] 000021480 _____ (Malwarebytes) 9E77C51E14FA9A323EE1635DC74ECC07 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\servicepkg\MBAMService.exe
[2022-08-10 14:52][2022-08-10 14:52] 008680192 _____ (Malwarebytes) 567234C51B41589821559B3EFD76C81D [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCore.dll
[2022-08-10 14:52][2022-08-10 14:52] 005550576 _____ (Malwarebytes) 2EA496253A329BB1F6B8820722F6BEC9 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCoreV4.dll
[2022-08-10 14:52][2022-08-10 14:52] 006472936 _____ (Malwarebytes) 47810D1F6C9EDB368FD8D31866271C35 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCoreV5.dll
[2022-08-10 14:52][2022-08-10 14:52] 006583968 _____ (Malwarebytes) 693A92285D91458A90C8E3902A0E48B1 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\malwarebytes_assistant.exe
[2022-08-10 14:52][2022-08-10 14:52] 001496648 _____ (Malwarebytes) 6B83D6F0124191EFE998CB618C52793B [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.exe
[2022-08-10 14:52][2022-08-10 14:52] 017549624 _____ (Malwarebytes) AEB881F0E24391B7F2B30A40D1AF7B82 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.firefox.manifest.json
[2022-08-10 14:52][2022-08-10 14:52] 000000257 _____ () BF8427536209FC0EB831250EDC2D110C [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.manifest.json
[2022-08-10 14:52][2022-08-10 14:52] 000000329 _____ () 7EA286316438ECDB7DA20180C8FDA426 [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\MbamBgNativeMsg.exe
[2022-08-10 14:52][2022-08-10 14:52] 003034640 _____ (Malwarebytes) 6CA27E05A3841AF2EF09AFBF76B086D8 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.cat
[2022-08-10 14:52][2022-08-10 14:52] 000011087 _____ () 60608328775D6ACF03EAAB38407E5B7C [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.inf
[2022-08-10 14:52][2022-08-10 14:52] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.sys
[2022-08-10 14:52][2022-08-10 14:52] 000021480 _____ (Malwarebytes) 9E77C51E14FA9A323EE1635DC74ECC07 [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbampt.exe
[2022-08-10 14:52][2022-08-10 14:52] 000006144 _____ (Malwarebytes) 2B3772FF21691FC19468B8EB55FFD4DB [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMService.exe
[2022-08-10 14:52][2022-08-10 14:52] 008680192 _____ (Malwarebytes) 567234C51B41589821559B3EFD76C81D [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMShim.dll
[2022-08-10 14:52][2022-08-10 14:52] 003143520 _____ (Malwarebytes) 384C9B81289CAE99F16615B1DE7851AE [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamtray.exe
[2022-08-10 14:52][2022-08-10 14:52] 007458872 _____ (Malwarebytes) A51D4A05996CA71B377C3A4CD5B3C70D [Le fichier est signé numériquement]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\MbamWhatsnewConfig.json
[2022-08-10 14:52][2022-08-10 14:52] 000000303 _____ () 2FD0713A98E08E2798AD774AC9F7805B [Fichier non signé]

C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMWsc.exe
[2022-08-10 14:52][2022-08-10 14:52] 003082680 _____ (Malwarebytes) CC5A44BCF69E8BB40D8E6492DA758BA0 [Le fichier est signé numériquement]

C:\Windows\Prefetch\MBAM.EXE-728D2E12.pf
[2021-12-21 22:14][2022-04-06 23:09] 000065405 _____ () D36A8538900E67F2F527CF824A24CB4C [Fichier non signé]

C:\Windows\Prefetch\MBAM.EXE-8137A995.pf
[2022-08-09 21:58][2022-08-09 22:34] 000025875 _____ () 81E12F5883BCDD518F1A35084449DD0E [Fichier non signé]

C:\Windows\Prefetch\MBAMINSTALLERSERVICE.EXE-F0636C85.pf
[2022-08-10 14:51][2022-08-10 14:51] 000009857 _____ () 3E8BCC9722FB7B4F52AA1C5201408F16 [Fichier non signé]

C:\Windows\Prefetch\MBAMSERVICE.EXE-1DD79AE7.pf
[2022-08-10 14:54][2022-08-10 14:54] 000004677 _____ () F6DDCEEA5DD35EEC4FCEA4579D18D0A2 [Fichier non signé]

C:\Windows\Prefetch\MBAMTRAY.EXE-08C66B4A.pf
[2022-02-10 09:54][2022-04-13 12:06] 000034182 _____ () 0E53013B587A17EED1BAEEF84ABC3C42 [Fichier non signé]

C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\Malwarebytes EULA.rtf
[2022-08-10 15:13][2021-08-27 19:43] 000040235 _____ () 51A2CD07C31DCA35BFA81DBD89BEE80F [Fichier non signé]

C:\Users\33658\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\{6D809377-6AF0-444B-8957-A3773F02200E}_Malwarebytes_Anti-Malware_mbam_exe
[2021-12-12 11:53][2021-12-12 11:53] 000037014 _____ () 8A341FAE0441154F147F36292B24A265 [Fichier non signé]

C:\Users\33658\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.4.5_0\app\assets\malwarebytes-logotype-dark-mode.svg
[2022-07-26 19:50][2022-07-19 13:58] 000005600 _____ () AA2312F6024635296291996851BB39CE [Fichier non signé]

C:\Users\33658\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.4.5_0\app\assets\malwarebytes-logotype.svg
[2022-07-26 19:50][2022-07-19 13:58] 000005603 _____ () D596C1D56DBDA532DD8DAD5EC836685C [Fichier non signé]

C:\Users\33658\AppData\Local\CrashDumps\mbam.exe.15144.dmp
[2021-12-21 22:14][2021-12-21 22:14] 002610840 _____ () 6483B8FE2814D6E4F6B6ED45A902B56E [Fichier non signé]

C:\Users\33658\AppData\Local\CrashDumps\Malwarebytes\mbam.exe.19216.dmp
[2021-12-17 22:54][2021-12-17 22:54] 261532819 _____ () 399782F64BB2F77C4851DC99F9CBD157 [Fichier non signé]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
[2022-04-06 23:08][2022-04-06 23:08] 000002035 _____ () 71649B5DD3913C201BE54B4BE24F250C [Fichier non signé]

C:\FRST\Quarantine\C\WINDOWS\Temp\mbamiservice.log.xBAD
[2022-08-09 21:55][2022-08-09 21:56] 000007906 _____ () 0814FE8E6A3682BCE22C2FDE4DD2100A [Fichier non signé]

C:\FRST\Quarantine\C\Users\33658\AppData\Local\temp\MBAMInstallerService.exe.xBAD
[2022-08-09 21:55][2022-08-09 21:56] 008704688 _____ (Malwarebytes) 115F0663D1099AA47B60859E8E5C21A6 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\malwarebytes_assistant.exe
[2022-04-06 23:08][2022-04-06 23:08] 001457336 _____ (Malwarebytes) F80AC58A49D6D5C0CF83ADE4D904056A [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe
[2022-04-06 23:08][2022-04-06 23:08] 017597624 _____ (Malwarebytes) 91B1753790E4E0EDECA585B7A258867F [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.firefox.manifest.json
[2022-04-06 23:08][2022-04-06 23:08] 000000257 _____ () BF8427536209FC0EB831250EDC2D110C [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.manifest.json
[2022-04-06 23:08][2022-04-06 23:08] 000000268 _____ () 9F0F2D21F488DA09B1719D00882B6D6D [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MbamBgNativeMsg.exe
[2022-04-06 23:08][2022-04-06 23:08] 002860216 _____ (Malwarebytes) 8EDA23E8B47631C735B3D9499C969D49 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMCore.dll
[2022-04-06 23:08][2022-03-30 20:43] 006472936 _____ (Malwarebytes) 47810D1F6C9EDB368FD8D31866271C35 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.cat
[2022-04-06 23:08][2022-04-06 23:08] 000010009 _____ () 7453833781787689F45A16F8DC9038F1 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.inf
[2022-04-06 23:08][2022-04-06 23:08] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.sys
[2022-04-06 23:08][2022-04-06 23:08] 000019912 _____ (Malwarebytes) BF46AFE0CC03D9A5883E74438170B841 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMInstallerService.exe
[2021-09-26 18:35][2022-04-06 23:08] 007273144 _____ (Malwarebytes) 695B2CEECE00C82D4DE0819CD344665C [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MbamPt.exe
[2022-04-06 23:08][2022-04-06 23:08] 000021008 _____ (Malwarebytes) 63B788C7D70919A0BED3DDC3E64C3077 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMService.exe
[2022-04-06 23:08][2022-04-06 23:08] 008348856 _____ (Malwarebytes) 34B32A16508760E174ABB1A4CD37D8CD [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMShim.dll
[2022-04-06 23:08][2022-04-06 23:08] 003066552 _____ (Malwarebytes) C8422FC6E90EE7AC1BD610BBDC518412 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamtray.exe
[2022-04-06 23:08][2022-04-06 23:08] 007078072 _____ (Malwarebytes) 23EE636270C5B04B43FA6935D9B60027 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMWsc.exe
[2022-04-06 23:08][2022-04-06 23:08] 002376736 _____ (Malwarebytes) 3AAFC4BA7BBE49E318ED008E0005A6E3 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.cat
[2022-04-06 23:08][2022-04-06 23:08] 000011240 _____ () D46420154510E1D88DBE7B85C6ABCB6A [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.inf
[2022-04-06 23:08][2022-04-06 23:08] 000003109 _____ () E5BB98E4D7ADF79CF7355AEB4A12D3C4 [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.sys
[2022-04-06 23:08][2022-04-06 23:08] 000223688 _____ (Malwarebytes) 80918D7EEFEE588D4E5377B521B83E1D [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.tmf
[2022-04-06 23:08][2022-04-06 23:08] 000147097 _____ () 6C0AD11A2114B621201EB8CEC12E1BB9 [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.cat
[2022-04-06 23:08][2022-04-06 23:08] 000010854 _____ () D3F3D92B3AD4407053621A0C353D2968 [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.inf
[2022-04-06 23:08][2022-04-06 23:08] 000002276 _____ () 0FF3F3BA83E1DC78AA42E205E1A01867 [Fichier non signé]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.sys
[2022-04-06 23:08][2022-04-06 23:08] 000248992 _____ (Malwarebytes) 0B17A8F4956ABD5FA1A0851B59FF960E [Le fichier est signé numériquement]

C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.tmf
[2022-04-06 23:08][2022-04-06 23:08] 000159868 _____ () 3093D6869C16FE6AF563B3F5C71A5F06 [Fichier non signé]


dossier:
========
2021-12-17 22:54 - 2021-12-17 22:54 _____ C:\Users\33658\AppData\Local\CrashDumps\Malwarebytes
2021-12-21 22:14 - 2021-12-21 22:14 ____C C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mbam.exe_302f2d7f93313ef877b342879a486e1afa4f34f4_6b68dbb4_04dfeb66-8659-4473-a07a-8ab197e6313c

Registre:
========

===================== Résultats de recherche pour "mbam" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2058A31F-5F59-4452-9204-03F588252FFC}]
""="IMBAMServiceControllerV6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E0F1EE6-E7CA-4BEE-8C08-0959842DA615}]
""="IMBAMServiceControllerV7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA1D4FDD-C9C8-4575-A2A1-4179C3A3473D}]
""="IMBAMServiceControllerV5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2058A31F-5F59-4452-9204-03F588252FFC}]
""="IMBAMServiceControllerV6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4E0F1EE6-E7CA-4BEE-8C08-0959842DA615}]
""="IMBAMServiceControllerV7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FA1D4FDD-C9C8-4575-A2A1-4179C3A3473D}]
""="IMBAMServiceControllerV5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"mbam.exe"="11000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"mbamtray.exe"="11000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\MBAMService.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}]
"PRODUCTEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}]
"REPORTINGEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AvTracking\ExpiredExeUnconditional\MBAMWsc.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\WicaAvPathsExpiredTemp]
"1"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]
"ServiceName"="MbamElam"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]
"Path"="\SystemRoot\system32\DRIVERS\MbamElam.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]
"Path.Org"="system32\DRIVERS\MbamElam.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]
"Path.Win32"="C:\Windows\System32\drivers\MbamElam.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam]
"DisplayName"="MbamElam"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]
"ServiceName"="MBAMSwissArmy"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]
"Path"="\SystemRoot\System32\Drivers\mbamswissarmy.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]
"Path.Org"="\SystemRoot\System32\Drivers\mbamswissarmy.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]
"Path.Win32"="C:\Windows\System32\drivers\mbamswissarmy.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy]
"DisplayName"="MBAMSwissArmy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService]
"ImagePath"=""C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService]
"DisplayName"="Malwarebytes Installer Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters]
"ProductCode"="MBAM-C"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters]
"ProgramDirectory"="C:\Program Files\Malwarebytes\Anti-Malware"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters]
"MbamUpgrade"="1"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters]
"checkedMbamWscCert"="1"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\644f10e9_0]
""="{2}.\\?\intelaudio#func_01&ven_10ec&dev_0236&subsys_10280a7e&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\rearlineouttoposst3/00010001|\Device\HarddiskVolume3\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe%b{00000000-0000-0000-0000-000000000000}"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe"="0x5341435001000000000000000700000028000000B8840C016D850C0101000000000000000000000A7322000010245A0F035AD70100000000000000000500000010000000000000000000000000000000000000000200000050000000000000000000004000000000000000000000000000000000EFA40900000000000100000001000000000000000000000000000000000000000000000000000000836F0000000000000400000000000000"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.FriendlyAppName"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.ApplicationCompany"="Malwarebytes"


===================== Résultats de recherche pour "malwarebytes" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes]
""="URL:Malwarebytes Protocol"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes\DefaultIcon]
""="C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe,0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes\shell\open\command]
""=""C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe" -uri "%1""

[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}]
"DISPLAYNAME"="Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}]
"PRODUCTEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}]
"REPORTINGEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe]
"DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\WicaAvPathsExpiredTemp]
"1"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributes"="{
"Version": 185,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale",
"f:FlightingBranchName",
"r:OEMMode"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar",
"r:WSX_Windows_Settings_Account",
"r:InstallDate",
"r:WSX_Runtime",
"r:DefaultUserRegion",
"a:GatedFeature_NI22H2",
"r:WSX_Windows_Shell_Start"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2",
"r:AndroidUserOptinValue",
"f:FlightingBranchName",
"f:FlightRing",
"r:CurrentBranch",
"c:ProcessorModel",
"r:NPUEnabledDevice"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID",
"r:AndroidUserOptinValue",
"c:ProcessorModel"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey",
"v:FileExistsMscoreeDll",
"w:NetFx3State",
"r:WCFHTTPActivationNotificationState",
"w:WCFHTTPActivationState",
"r:WCFNonHTTPActivationNotificationState",
"w:WCFNonHTTPActivationState",
"r:DotNetMissingComponentsTroubleshooterSuccess",
"r:IIS_ASPNET",
"w:IIS_ASPNET_WMI",
"r:IIS_NetFxExtensibility",
"w:IIS_NetFxExtensibility_WMI",
"r:WAS_NetFxEnvironment",
"w:WAS_NetFxEnvironment_WMI",
"v:XamlCbsActivationStore",
"v:XamlCbsActivationStoreArm64",
"v:OnnxruntimeVer",
"w:ElanFingerprintDriverVersion"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab",
"c:PrimaryDiskType"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"PHS": [
"r:GridZoneName"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds",
"r:WSX_Runtime"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey",
"r:Win11UpgradeAcceptedTimestamp",
"a:UpgEx_NI22H2",
"r:OobeNdupAcceptedTarget",
"r:OobeNdupFU22621CommitChoice",
"a:DataExpDateEpoch_NI22H2",
"a:GStatus_NI22H2",
"a:GStatus_NI22H2Setup",
"a:TimestampEpochString_NI22H2Setup",
"a:TimestampDelta_NI22H2SubtractNI22H2Setup",
"a:DataExpDateDelta_NI22H2SubtractNI22H2Setup",
"a:DataExpDateEpoch_NI22H2Setup",
"a:TimestampEpochString_NI22H2"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AndroidUserOptinValue": {
"HKey": "HKEY_CURRENT_USER",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\",
"ValueName": "OptedIn",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DotNetMissingComponentsTroubleshooterSuccess": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\.NETFramework",
"ValueName": "DotNetMissingComponentsTroubleshooterSuccess",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GridZoneName": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS",
"ValueName": "GridZoneName",
"RegValueType": "REG_SZ"
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"IIS_ASPNET": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"IIS_NetFxExtensibility": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"NPUEnabledDevice": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects",
"ValueName": "EffectsCameraAvailable",
"RegValueType": "REG_DWORD"
},
"OEMMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM",
"ValueName": "OOBEMode",
"RegValueType": "REG_SZ"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeNdupAcceptedTarget": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates",
"ValueName": "Target",
"RegValueType": "REG_SZ"
},
"OobeNdupFU22621CommitChoice": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621",
"ValueName": "CommitChoice",
"RegValueType": "REG_DWORD"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WAS_NetFxEnvironment": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WCFHTTPActivationNotificationState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WCFNonHTTPActivationNotificationState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"Win11UpgradeAcceptedTimestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD"
},
"Win11UpgradeAcceptedWUSeeker": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Runtime": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "ExperienceExtensions",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Shell_Start": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Shell.StartMenu",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"FileExistsMscoreeDll": {
"Path": "%windir%\\\\system32\\\\mscoree.dll",
"IfExists": true
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"OnnxruntimeVer": {
"Path": "%windir%\\\\system32\\\\onnxruntime.dll"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"XamlCbsActivationStore": {
"Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat",
"IfExists": true
},
"XamlCbsActivationStoreArm64": {
"Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat",
"IfExists": true
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"ElanFingerprintDriverVersion": {
"Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'",
"Name": "DriverVersion",
"Timeout": 2000
},
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
},
"IIS_ASPNET_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'",
"Name": "InstallState",
"Timeout": 2000
},
"IIS_NetFxExtensibility_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'",
"Name": "InstallState",
"Timeout": 2000
},
"NetFx3State": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'",
"Name": "InstallState",
"Timeout": 2000
},
"WAS_NetFxEnvironment_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'",
"Name": "InstallState",
"Timeout": 2000
},
"WCFHTTPActivationState": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'",
"Name": "InstallState",
"Timeout": 2000
},
"WCFNonHTTPActivationState": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'",
"Name": "InstallState",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributesVerified"="{
"Version": 185,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale",
"f:FlightingBranchName",
"r:OEMMode"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar",
"r:WSX_Windows_Settings_Account",
"r:InstallDate",
"r:WSX_Runtime",
"r:DefaultUserRegion",
"a:GatedFeature_NI22H2",
"r:WSX_Windows_Shell_Start"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2",
"r:AndroidUserOptinValue",
"f:FlightingBranchName",
"f:FlightRing",
"r:CurrentBranch",
"c:ProcessorModel",
"r:NPUEnabledDevice"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID",
"r:AndroidUserOptinValue",
"c:ProcessorModel"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey",
"v:FileExistsMscoreeDll",
"w:NetFx3State",
"r:WCFHTTPActivationNotificationState",
"w:WCFHTTPActivationState",
"r:WCFNonHTTPActivationNotificationState",
"w:WCFNonHTTPActivationState",
"r:DotNetMissingComponentsTroubleshooterSuccess",
"r:IIS_ASPNET",
"w:IIS_ASPNET_WMI",
"r:IIS_NetFxExtensibility",
"w:IIS_NetFxExtensibility_WMI",
"r:WAS_NetFxEnvironment",
"w:WAS_NetFxEnvironment_WMI",
"v:XamlCbsActivationStore",
"v:XamlCbsActivationStoreArm64",
"v:OnnxruntimeVer",
"w:ElanFingerprintDriverVersion"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab",
"c:PrimaryDiskType"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"PHS": [
"r:GridZoneName"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds",
"r:WSX_Runtime"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey",
"r:Win11UpgradeAcceptedTimestamp",
"a:UpgEx_NI22H2",
"r:OobeNdupAcceptedTarget",
"r:OobeNdupFU22621CommitChoice",
"a:DataExpDateEpoch_NI22H2",
"a:GStatus_NI22H2",
"a:GStatus_NI22H2Setup",
"a:TimestampEpochString_NI22H2Setup",
"a:TimestampDelta_NI22H2SubtractNI22H2Setup",
"a:DataExpDateDelta_NI22H2SubtractNI22H2Setup",
"a:DataExpDateEpoch_NI22H2Setup",
"a:TimestampEpochString_NI22H2"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AndroidUserOptinValue": {
"HKey": "HKEY_CURRENT_USER",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\",
"ValueName": "OptedIn",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DotNetMissingComponentsTroubleshooterSuccess": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\.NETFramework",
"ValueName": "DotNetMissingComponentsTroubleshooterSuccess",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GridZoneName": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS",
"ValueName": "GridZoneName",
"RegValueType": "REG_SZ"
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"IIS_ASPNET": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"IIS_NetFxExtensibility": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"NPUEnabledDevice": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects",
"ValueName": "EffectsCameraAvailable",
"RegValueType": "REG_DWORD"
},
"OEMMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM",
"ValueName": "OOBEMode",
"RegValueType": "REG_SZ"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeNdupAcceptedTarget": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates",
"ValueName": "Target",
"RegValueType": "REG_SZ"
},
"OobeNdupFU22621CommitChoice": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621",
"ValueName": "CommitChoice",
"RegValueType": "REG_DWORD"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WAS_NetFxEnvironment": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WCFHTTPActivationNotificationState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WCFNonHTTPActivationNotificationState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation",
"ValueName": "Selection",
"RegValueType": "REG_DWORD"
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"Win11UpgradeAcceptedTimestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD"
},
"Win11UpgradeAcceptedWUSeeker": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferAccepted",
"RegValueType": "REG_QWORD",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Runtime": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "ExperienceExtensions",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
},
"WSX_Windows_Shell_Start": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Shell.StartMenu",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"FileExistsMscoreeDll": {
"Path": "%windir%\\\\system32\\\\mscoree.dll",
"IfExists": true
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"OnnxruntimeVer": {
"Path": "%windir%\\\\system32\\\\onnxruntime.dll"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"XamlCbsActivationStore": {
"Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat",
"IfExists": true
},
"XamlCbsActivationStoreArm64": {
"Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat",
"IfExists": true
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"ElanFingerprintDriverVersion": {
"Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'",
"Name": "DriverVersion",
"Timeout": 2000
},
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
},
"IIS_ASPNET_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'",
"Name": "InstallState",
"Timeout": 2000
},
"IIS_NetFxExtensibility_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'",
"Name": "InstallState",
"Timeout": 2000
},
"NetFx3State": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'",
"Name": "InstallState",
"Timeout": 2000
},
"WAS_NetFxEnvironment_WMI": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'",
"Name": "InstallState",
"Timeout": 2000
},
"WCFHTTPActivationState": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'",
"Name": "InstallState",
"Timeout": 2000
},
"WCFNonHTTPActivationState": {
"Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'",
"Name": "InstallState",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe]
""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService]
"ImagePath"=""C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService]
"DisplayName"="Malwarebytes Installer Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters]
"ProgramDirectory"="C:\Program Files\Malwarebytes\Anti-Malware"

[HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Malwarebytes Support Tool]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\DOMStorage\malwarebytes.com]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\DOMStorage\www.malwarebytes.com]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"Malwarebytes.Antimalware"="15"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched]
"Malwarebytes.Antimalware"="8"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData]
"Malwarebytes.Antimalware"="132937531950437381"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]
"0"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Privacy (VPN).lnk
C:\Program Files\Malwarebytes\Privacy\UI\MBPrivacy.exe
"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:]

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\Downloads\MBSetup (1).exe.FriendlyAppName"="Malwarebytes Setup"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\Downloads\MBSetup (1).exe.ApplicationCompany"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\Downloads\MBSetup (2).exe.FriendlyAppName"="Malwarebytes Setup"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\Downloads\MBSetup (2).exe.ApplicationCompany"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.FriendlyAppName"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.ApplicationCompany"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\Downloads\mb-support-1.8.7.918.exe.FriendlyAppName"="Malwarebytes Support Tool"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\7zSDB3E.tmp\mbstub.exe.ApplicationCompany"="Malwarebytes Corporation"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\mb-support.exe.ApplicationCompany"="Malwarebytes Corporation"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\MBSetup.exe.FriendlyAppName"="Malwarebytes Setup"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\MBSetup.exe.ApplicationCompany"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\3c260b90-8e6c-4bda-a92a-c1b186071346.exe.FriendlyAppName"="Malwarebytes Privacy Installer"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\3c260b90-8e6c-4bda-a92a-c1b186071346.exe.ApplicationCompany"="Malwarebytes"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\7zSDBCF.tmp\mbstub.exe.ApplicationCompany"="Malwarebytes Corporation"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\adf43473-a1fb-4010-8cf5-6482cb73272b.exe.FriendlyAppName"="Malwarebytes Privacy Installer"

[HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\33658\AppData\Local\Temp\adf43473-a1fb-4010-8cf5-6482cb73272b.exe.ApplicationCompany"="Malwarebytes"


====== Fin de Chercher ======