Farbar Recovery Scan Tool (x64) Version: 27-12-2021 Exécuté par Christine (30-12-2021 18:04:59) Exécuté depuis D:\Mes Données\Desktop Mode d'amorçage: Normal ================== Chercher Fichiers: "SearchAll: norton;symantec" ============= Fichier: ======== C:\Windows\System32\Tasks_Migrated\Norton WSC Integration [2020-08-05 09:34][2020-08-05 09:34] 000003376 _____ () 01BB5ED3FA4B42A09B538A43AC730FAA [Fichier non signé] C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Autofix [2020-11-05 17:41][2021-02-27 19:02] 000003146 _____ () 23FD4F7D960C9068DCDEE33656CD2F4E [Fichier non signé] C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Error Analyzer [2020-11-05 17:41][2020-11-05 17:41] 000003100 _____ () DDD4013AFF06CA784CC2DF99A423E3CB [Fichier non signé] C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Error Processor [2020-11-05 17:41][2020-11-05 17:41] 000003812 _____ () 55C5EC6EF469CDD976216547768006B9 [Fichier non signé] C:\Windows\Prefetch\NORTONSECURITY.EXE-5AD635E4.pf [2021-12-21 15:32][2021-12-24 10:59] 000053334 _____ () 0048F378B80FCA4BA80C15C5178E696B [Fichier non signé] C:\ProgramData\Microsoft\Windows\AppRepository\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp.xml [2021-12-26 19:17][2021-12-26 19:17] 000003331 _____ () CD627A47ED3982F1F5ECACBE08AB8290 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\c0106e66-f0c0-47b6-be89-93827ff6bd68\Message\nortonOnDark.png [2021-11-25 09:22][2021-12-10 10:42] 000010816 _____ () 048D122328F3246303D449D6686819DA [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\b9f0b120-29ef-41c1-9a2a-88e7578f5fd0\Message\nortonOnDark.png [2021-09-11 08:42][2021-09-16 10:43] 000010816 _____ () 8BA9A8708B287C5768064D238EE8777B [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\a3eaf261-8a2e-4b37-91c6-7c6515af3cd7\Message\nortonOnDark.png [2021-09-24 09:20][2021-09-28 11:18] 000010816 _____ () DAB71B4026D5E85EB8731D669ECC835F [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\7e1b6b66-2803-4168-b602-f014eddd6fa3\Message\nortonOnDark.png [2021-11-25 09:00][2021-12-20 10:07] 000010816 _____ () 54E7032F160C61A3B0AF0123BD2CA389 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\31ffb35d-2e53-4fba-8282-c6945ce596f5\Message\nortonOnDark.png [2021-07-19 08:03][2021-07-19 08:03] 000010816 _____ () 6CEC2AC92CA405085CA390E5AD92A1E1 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\1597e3cb-7384-46b6-8373-4c874c514fc1\Message\nortonOnDark.png [2021-10-10 14:55][2021-10-10 14:55] 000010816 _____ () 7D8730D1C43A215B6CABD919F3AD2432 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\12674afe-f12c-4926-a055-96c064cbe41b\Message\nortonOnDark.png [2021-09-15 09:59][2021-09-20 09:31] 000010816 _____ () E8FBE2A54BE69B40A2BC97831EBF1283 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\0c808cad-7f6e-4203-a757-69505a5b8a4e\Message\nortonOnDark.png [2021-12-01 10:09][2021-12-05 12:08] 000010816 _____ () 00392C0D76F549B115C3CE6A868CD406 [Fichier non signé] C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\05354ea9-4692-4d25-afb6-47d717c13dee\Message\nortonOnDark.png [2021-07-13 11:09][2021-07-13 11:09] 000010816 _____ () B0A46A1C58594FAB234DC478F1B92278 [Fichier non signé] dossier: ======== 2020-11-05 17:41 - 2021-02-27 19:02 _____ C:\Windows\System32\Tasks_Migrated\Norton 360 2020-06-04 08:38 - 2021-05-16 15:37 _____ C:\Users\Public\Downloads\Norton 2021-12-30 15:58 - 2021-12-30 16:00 _____ C:\Users\Christine\AppData\Local\Temp\NortonInstall 2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\Users\Christine\AppData\Local\Packages\NortonSecurity_cjtsyd8xszapp 2021-12-30 15:54 - 2021-12-30 15:57 _____ C:\ProgramData\Norton 2020-06-04 08:39 - 2020-06-04 08:39 _____ C:\ProgramData\NortonInstaller 2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\ProgramData\Packages\NortonSecurity_cjtsyd8xszapp 2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\ProgramData\Microsoft\Windows\AppRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp 2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp 2021-03-16 09:25 - 2021-12-24 10:38 _____ C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton 2021-12-26 19:29 - 2021-12-26 19:29 _____ C:\FRST\Quarantine\C\Users\Christine\AppData\Local\Norton 2020-06-04 08:38 - 2021-12-30 10:20 _____ C:\FRST\Quarantine\C\ProgramData\Norton 2020-06-04 08:40 - 2021-12-30 09:36 _____ C:\FRST\Quarantine\C\Program Files\Common Files\Symantec Shared 2021-12-26 19:47 - 2021-12-28 12:03 _____ C:\FRST\Quarantine\C\Program Files\Common Files\AV\Norton 360 Registre: ======== ===================== Résultats de recherche pour "norton" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32] ""="C:\Program Files\Norton Security\Engine\22.21.11.46\uiWNSNotificationApp.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32] ""="C:\Program Files\Norton Security\Engine\22.21.11.46\symamsi.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\file\ShellEx\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] "Path"="C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.20.4.57\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.2.50\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.3.48\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.9.25\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu\CurVer] ""="NortonLifeLock.Norton.Antivirus.IEContextMenu.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonSCU.ToolManagerImpl] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex\{585E64E1-BDAF-4F47-956F-078F56069684}\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex\{898C4767-C038-447C-A4CE-C8605E22D4DC}\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\0] "ApplicationId"="NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\0] "ApplicationDisplayName"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\1] "ApplicationId"="NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\1] "ApplicationDisplayName"="Norton Security" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\0\win32] ""="C:\Program Files\Norton Security\Engine32\22.21.11.46\ToolLib.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\HELPDIR] ""="C:\Program Files\Norton Security\Engine32\22.21.11.46\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}] "LocalizedString"="@C:\Program Files\Norton Security\Engine32\22.21.11.46\nuPerfScan.exe,-101" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\InprocServer32] ""="C:\PROGRA~1\NORTON~1\Engine32\222111~1.46\ToolLib.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\ProgID] ""="NortonSCU.ToolManagerImpl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32] ""="C:\Program Files\Norton Security\Engine32\22.21.11.46\symamsi.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\Compatibility\NortonSystemInfo] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\NortonSecurity.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\nsWscSvc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\nsWscSvc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\nsWscSvc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}] "DISPLAYNAME"="Norton 360" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}] "PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}] "REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASMANCS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASTLS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StagingInfo\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5] "PackageRelativeApplicationId"="NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5] "ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5] "_IndexKeys"="Package\7fc\3c5 PackageAndPackageRelativeApplicationId\7fc^NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Index\PackageAndPackageRelativeApplicationId\7fc^NortonSecurity] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\66] "ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\66] "_IndexKeys"="Application\3c5\66 UserAndApplication\3^3c5 UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity\66" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\c0] "ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\c0] "_IndexKeys"="Application\3c5\c0 UserAndApplication\3^3c5 UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity\c0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc] "PackageFullName"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc] "InstalledLocation"="C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc] "_IndexKeys"="PackageFamily\73\7fc PackageFullName\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Data\3a] "Path"="C:\Program Files\Norton Security\Engine\22.21.11.46" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73] "PackageFamilyName"="NortonSecurity_cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73] "Publisher"="CN=NortonLifeLock Inc., OU=Norton Product Engineering - CM, O=NortonLifeLock Inc., L=Tempe, S=Arizona, C=US" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73] "_IndexKeys"="PackageFamilyName\NortonSecurity_cjtsyd8xszapp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName\NortonSecurity_cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\PackageState\S-1-5-21-3911643055-33977892-3237656246-1001\NortonSecurity_cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Arestore.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\asOELnch.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\BHCA.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buIH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buVss.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ccSEUPDT.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\chrome.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CLTLMH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cltRT.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coExport.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coInst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coNatHst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CpySnt.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cscript.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dcStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dll_register_server.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DNLP0808.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\EFAInst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ehmsas.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Elaminst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\excel.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\explorer.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\firefox.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\GEARDIFx.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ieuser.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\iexplore.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstCA.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\IPSDgnHC.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MCUI32.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msaccess.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msimn.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\navw32.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ncolow.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nsWscSvc.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nuPerfScan.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\outlook.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powerpnt.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powershell.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ruleup.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevinst.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevntx64.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\srtsp_ca.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\sshelper.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\syknlu.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymDgnHC.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymErr.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymHTMLHost.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymIMI64.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\symimins.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\tuIH.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\uistub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\visio.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\VPNService.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wfpunins.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winproj.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winword.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wscript.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\WSCStub.exe] "DumpFolder"="C:\ProgramData\Norton\LocalDumps" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20211227.061\IPSEng64.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant] "ExecutablesToExclude"="C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.11.46\InstStub.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{0154667D-1F1F-4758-B35F-4766C41E1CC3}] "ProfileName"="NortonSecureVpn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{0154667D-1F1F-4758-B35F-4766C41E1CC3}] "Description"="NortonSecureVpn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Unmanaged\010103000F0000F0000200000F0000F02DDBC734AC251FD56B3385FE11C6FF342A92D8CE14F08C9D274526C29F932B1A] "Description"="NortonSecureVpn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Unmanaged\010103000F0000F0000200000F0000F02DDBC734AC251FD56B3385FE11C6FF342A92D8CE14F08C9D274526C29F932B1A] "FirstNetwork"="NortonSecureVpn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 162, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD" }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 162, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD" }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DirectDraw\Compatibility\NortonSystemInfo] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules] "C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20211227.061\IPSEng32.dll"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Norton] [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64] "Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64] "Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64] "Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64] "Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64] "Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64] "Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] "ServiceName"="NortonSecurity" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] "Path"=""C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe" /s "NortonSecurity" /m "C:\Program Files\Norton Security\Engine\22.20.5.39\diMaster.dll" /prefetch:1" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] "Path.Org"=""C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe" /s "NortonSecurity" /m "C:\Program Files\Norton Security\Engine\22.20.5.39\diMaster.dll" /prefetch:1" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] "Path.Win32"="C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity] "DisplayName"="Norton Security" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc] "Path"=""C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc] "Path.Org"=""C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc] "Path.Win32"="C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc] "DisplayName"="Norton WSC Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt] "Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt] "Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt] "Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3911643055-33977892-3237656246-1001] "\Device\HarddiskVolume4\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\FSDUI_Custom.exe"="0x29C974A28DFDD70100000000000000000000000002000000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3911643055-33977892-3237656246-1001] "\Device\HarddiskVolume4\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\DSP-N360-ESD-22.20.2.57.exe"="0xD187EBF68DFDD70100000000000000000000000002000000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Active Care] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Advanced Uninstaller] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Bye Pass] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Disk Defrag] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Drive Scrubber] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Internet Cleaner] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Malware Killer] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Memory Mechanic] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Message Toaster] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\NetBooster] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Network Scanner] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\On Demand Boost] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Privacy Guardian] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Process Scanner] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Product Installer] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Registry Cleaner] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Search and Recover] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Startup Optimizer] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Checkup] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Mechanic] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Shield] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Windows Junk Cleaner] "EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules] "{2BA6F5AE-245A-4C5C-80C0-2BFCD3AE7551}"="v2.30|Action=Block|Active=TRUE|Dir=In|Name=Norton Security|Desc=Norton Security|LUOwn=S-1-5-21-3911643055-33977892-3237656246-1001|AppPkgId=S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677|EmbedCtxt=Norton Security|" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules] "{8D09E6EC-4CBE-4EB7-BDF4-B8F5FDAAF1D0}"="v2.30|Action=Block|Active=TRUE|Dir=Out|Name=Norton Security|Desc=Norton Security|LUOwn=S-1-5-21-3911643055-33977892-3237656246-1001|AppPkgId=S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677|EmbedCtxt=Norton Security|" [HKEY_USERS\.DEFAULT\Software\Classes\NortonSecurity] [HKEY_USERS\.DEFAULT\Software\Classes\NortonSecurity] "URL Protocol"="nortonsecurity://show" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.2.50\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.3.48\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.9.25\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache] "C:\Program Files\Norton Security\Engine\22.21.11.46\NortonSecurity.exe"="Norton Security" [HKEY_USERS\.DEFAULT\Software\Norton] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\AppDataLow\Software\Norton] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\MostRecentApplication] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\MostRecentApplication] "Id"="NORTONSECURITY.EXE6066105D00053D28" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5EC58F39000542B8] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5EC58F39000542B8] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D00] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D00] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D28] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D28] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE6066105D00053D28] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE6066105D00053D28] "Name"="NORTONSECURITY.EXE" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Office\Outlook\Addins\MsouPlug.OutlookPlug] "FriendlyName"="Norton AntiSpam Outlook Plugin" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Office\Outlook\Addins\MsouPlug.OutlookPlug] "Description"="Norton AntiSpam Outlook Plugin" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB\NortonSecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\NortonSecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "Symantec.Norton Security"="128" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "NortonLifeLock.Norton Security"="477" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "NortonLifeLock.Norton Security"="27" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections] "NortonSecureVpn"="0x4600000002000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications\Backup\NortonSecurity_cjtsyd8xszapp!NortonSecurity] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Norton Download Manager{DSP-N360-22200257-SHPD-FSD5220003}"="C:\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\FSDUI_Custom.exe /m /WIN10_UPGRADE "C:\Users\CHRIST~1\AppData\Local\Temp\{90FCB8B8-6A37-40CD-BA7D-0F6235A23E92}\Upgrade.exe" /m" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.20.4.57\uiStub.exe"="0x534143500100000000000000070000002800000040EF04007405050001000000000000000000000A00210000631F6E6F0EDED40100000000000000000200000028000000000000000000000000000000000000000000000000000000863D0000000000000800000008000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.20.5.39\uiStub.exe"="0x5341435001000000000000000700000028000000C8EF0400E607050001000000000000000000000A00210000631F6E6F0EDED40100000000000000000200000028000000000000000000000000000000000000000000000000000000AF3E0000000000001500000015000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.1.151\uiStub.exe"="0x534143500100000000000000070000002800000090E90400005A050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000002E080000000000000500000005000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.2.50\uiStub.exe"="0x5341435001000000000000000700000028000000B8E90400E391050001000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000FD3E0000000000000A0000000A000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Users\Public\Downloads\Norton\{DSP-N360-2221348-SHPD-FSD5250006}\DSP-N360-ESD-22.21.3.48.exe"="0x5341435001000000000000000700000028000000F8E7E70B1C39E80B01000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000637E0100000000000100000001000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.3.48\uiStub.exe"="0x5341435001000000000000000700000028000000B8E90400BFD4050001000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000290E0000000000000400000004000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.5.44\uiStub.exe"="0x5341435001000000000000000700000028000000F0E90400E61E050001000000000000000000000A0021000050BB64EDDDACD5010000000000000000020000002800000000000000000000000000000000000000000000000000000003650000000000000A0000000A000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.6.51\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400AB65050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000006C020100000000000B0000000B000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400ED0D050001000000000000000000000A0021000050BB64EDDDACD5010000000000000000020000002800000000000000000000000000000000000000000000000000000080650000000000000500000005000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Norton Security\Engine\22.21.10.40\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400C06C050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000005B660000000000000400000004000000" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Norton] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\ActivatableClasses\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\MuiCache\72\E27DDEF7] "@C:\PROGRA~1\NORTON~1\Branding\muis.dll,-601"="Norton 360" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677] "DisplayName"="Norton Security" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677] "Moniker"="nortonsecurity_cjtsyd8xszapp" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\nortonsecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache\NortonSecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\NortonSecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\NortonSecurity_cjtsyd8xszapp\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] "PackageRootFolder"="C:\Program Files\Norton Security\Engine\22.21.11.46" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] "DisplayName"="Norton Security" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] "PackageID"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp\Schemas] "PackageFullName"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp\SplashScreen\NortonSecurity_cjtsyd8xszapp!NortonSecurity] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "D:\Mes Données\Downloads\N360Downloader.exe.FriendlyAppName"="Norton Download Manager" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "D:\Mes Données\Downloads\N360Downloader.exe.ApplicationCompany"="NortonLifeLock Inc." [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\NortonSecurity] [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\NortonSecurity\shell\open\command] ""="C:\Program Files\Norton Security\Engine\22.21.10.40\uistub.exe /cct" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp] ===================== Résultats de recherche pour "symantec" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 162, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD" }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 162, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "c:ProcessorIdentifier", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD" }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl] "Path"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl] "Path.Org"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl] "Path.Win32"="C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl] "DisplayName"="Symantec Eraser Control driver" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv] "Path"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv] "Path.Org"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv] "Path.Win32"="C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SRTSP] "DisplayName"="Symantec Real Time Storage Protection x64" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SRTSPX] "DisplayName"="Symantec Real Time Storage Protection (PEL) x64" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEFASI] "DisplayName"="Symantec Extended File Attributes (SI)" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymELAM] "DisplayName"="Symantec ELAM Driver" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymIRON] "DisplayName"="Symantec Iron Driver" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymNetS] "DisplayName"="Symantec Network Security WFP Driver" [HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "Symantec.Norton Security"="128" ====== Fin de Chercher ======