Farbar Recovery Scan Tool (x64) Version: 04-08-2022 Exécuté par 33658 (10-08-2022 16:07:57) Exécuté depuis C:\Users\33658\Downloads Mode d'amorçage: Normal ================== Chercher Fichiers: "SearchAll: mbam;malwarebytes" ============= Fichier: ======== C:\Windows\Temp\mbamiservice.log [2022-08-10 14:51][2022-08-10 14:54] 000079704 _____ () 14424BEAE6A87AE75778A62830B277C9 [Fichier non signé] C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.cat [2022-08-10 14:52][2022-08-10 14:52] 000011087 _____ () 60608328775D6ACF03EAAB38407E5B7C [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.inf [2022-08-10 14:52][2022-08-10 14:52] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé] C:\Windows\Temp\MBInstallTemp\servicepkg\mbamelam.sys [2022-08-10 14:52][2022-08-10 14:52] 000021480 _____ (Malwarebytes) 9E77C51E14FA9A323EE1635DC74ECC07 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\servicepkg\MBAMService.exe [2022-08-10 14:52][2022-08-10 14:52] 008680192 _____ (Malwarebytes) 567234C51B41589821559B3EFD76C81D [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCore.dll [2022-08-10 14:52][2022-08-10 14:52] 005550576 _____ (Malwarebytes) 2EA496253A329BB1F6B8820722F6BEC9 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCoreV4.dll [2022-08-10 14:52][2022-08-10 14:52] 006472936 _____ (Malwarebytes) 47810D1F6C9EDB368FD8D31866271C35 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\dbclspkg\MBAMCoreV5.dll [2022-08-10 14:52][2022-08-10 14:52] 006583968 _____ (Malwarebytes) 693A92285D91458A90C8E3902A0E48B1 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\malwarebytes_assistant.exe [2022-08-10 14:52][2022-08-10 14:52] 001496648 _____ (Malwarebytes) 6B83D6F0124191EFE998CB618C52793B [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.exe [2022-08-10 14:52][2022-08-10 14:52] 017549624 _____ (Malwarebytes) AEB881F0E24391B7F2B30A40D1AF7B82 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.firefox.manifest.json [2022-08-10 14:52][2022-08-10 14:52] 000000257 _____ () BF8427536209FC0EB831250EDC2D110C [Fichier non signé] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbam.manifest.json [2022-08-10 14:52][2022-08-10 14:52] 000000329 _____ () 7EA286316438ECDB7DA20180C8FDA426 [Fichier non signé] C:\Windows\Temp\MBInstallTemp\ctlrpkg\MbamBgNativeMsg.exe [2022-08-10 14:52][2022-08-10 14:52] 003034640 _____ (Malwarebytes) 6CA27E05A3841AF2EF09AFBF76B086D8 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.cat [2022-08-10 14:52][2022-08-10 14:52] 000011087 _____ () 60608328775D6ACF03EAAB38407E5B7C [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.inf [2022-08-10 14:52][2022-08-10 14:52] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamelam.sys [2022-08-10 14:52][2022-08-10 14:52] 000021480 _____ (Malwarebytes) 9E77C51E14FA9A323EE1635DC74ECC07 [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbampt.exe [2022-08-10 14:52][2022-08-10 14:52] 000006144 _____ (Malwarebytes) 2B3772FF21691FC19468B8EB55FFD4DB [Fichier non signé] C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMService.exe [2022-08-10 14:52][2022-08-10 14:52] 008680192 _____ (Malwarebytes) 567234C51B41589821559B3EFD76C81D [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMShim.dll [2022-08-10 14:52][2022-08-10 14:52] 003143520 _____ (Malwarebytes) 384C9B81289CAE99F16615B1DE7851AE [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\mbamtray.exe [2022-08-10 14:52][2022-08-10 14:52] 007458872 _____ (Malwarebytes) A51D4A05996CA71B377C3A4CD5B3C70D [Le fichier est signé numériquement] C:\Windows\Temp\MBInstallTemp\ctlrpkg\MbamWhatsnewConfig.json [2022-08-10 14:52][2022-08-10 14:52] 000000303 _____ () 2FD0713A98E08E2798AD774AC9F7805B [Fichier non signé] C:\Windows\Temp\MBInstallTemp\ctlrpkg\MBAMWsc.exe [2022-08-10 14:52][2022-08-10 14:52] 003082680 _____ (Malwarebytes) CC5A44BCF69E8BB40D8E6492DA758BA0 [Le fichier est signé numériquement] C:\Windows\Prefetch\MBAM.EXE-728D2E12.pf [2021-12-21 22:14][2022-04-06 23:09] 000065405 _____ () D36A8538900E67F2F527CF824A24CB4C [Fichier non signé] C:\Windows\Prefetch\MBAM.EXE-8137A995.pf [2022-08-09 21:58][2022-08-09 22:34] 000025875 _____ () 81E12F5883BCDD518F1A35084449DD0E [Fichier non signé] C:\Windows\Prefetch\MBAMINSTALLERSERVICE.EXE-F0636C85.pf [2022-08-10 14:51][2022-08-10 14:51] 000009857 _____ () 3E8BCC9722FB7B4F52AA1C5201408F16 [Fichier non signé] C:\Windows\Prefetch\MBAMSERVICE.EXE-1DD79AE7.pf [2022-08-10 14:54][2022-08-10 14:54] 000004677 _____ () F6DDCEEA5DD35EEC4FCEA4579D18D0A2 [Fichier non signé] C:\Windows\Prefetch\MBAMTRAY.EXE-08C66B4A.pf [2022-02-10 09:54][2022-04-13 12:06] 000034182 _____ () 0E53013B587A17EED1BAEEF84ABC3C42 [Fichier non signé] C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\Malwarebytes EULA.rtf [2022-08-10 15:13][2021-08-27 19:43] 000040235 _____ () 51A2CD07C31DCA35BFA81DBD89BEE80F [Fichier non signé] C:\Users\33658\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\125\{6D809377-6AF0-444B-8957-A3773F02200E}_Malwarebytes_Anti-Malware_mbam_exe [2021-12-12 11:53][2021-12-12 11:53] 000037014 _____ () 8A341FAE0441154F147F36292B24A265 [Fichier non signé] C:\Users\33658\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.4.5_0\app\assets\malwarebytes-logotype-dark-mode.svg [2022-07-26 19:50][2022-07-19 13:58] 000005600 _____ () AA2312F6024635296291996851BB39CE [Fichier non signé] C:\Users\33658\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee\2.4.5_0\app\assets\malwarebytes-logotype.svg [2022-07-26 19:50][2022-07-19 13:58] 000005603 _____ () D596C1D56DBDA532DD8DAD5EC836685C [Fichier non signé] C:\Users\33658\AppData\Local\CrashDumps\mbam.exe.15144.dmp [2021-12-21 22:14][2021-12-21 22:14] 002610840 _____ () 6483B8FE2814D6E4F6B6ED45A902B56E [Fichier non signé] C:\Users\33658\AppData\Local\CrashDumps\Malwarebytes\mbam.exe.19216.dmp [2021-12-17 22:54][2021-12-17 22:54] 261532819 _____ () 399782F64BB2F77C4851DC99F9CBD157 [Fichier non signé] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk [2022-04-06 23:08][2022-04-06 23:08] 000002035 _____ () 71649B5DD3913C201BE54B4BE24F250C [Fichier non signé] C:\FRST\Quarantine\C\WINDOWS\Temp\mbamiservice.log.xBAD [2022-08-09 21:55][2022-08-09 21:56] 000007906 _____ () 0814FE8E6A3682BCE22C2FDE4DD2100A [Fichier non signé] C:\FRST\Quarantine\C\Users\33658\AppData\Local\temp\MBAMInstallerService.exe.xBAD [2022-08-09 21:55][2022-08-09 21:56] 008704688 _____ (Malwarebytes) 115F0663D1099AA47B60859E8E5C21A6 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\malwarebytes_assistant.exe [2022-04-06 23:08][2022-04-06 23:08] 001457336 _____ (Malwarebytes) F80AC58A49D6D5C0CF83ADE4D904056A [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe [2022-04-06 23:08][2022-04-06 23:08] 017597624 _____ (Malwarebytes) 91B1753790E4E0EDECA585B7A258867F [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.firefox.manifest.json [2022-04-06 23:08][2022-04-06 23:08] 000000257 _____ () BF8427536209FC0EB831250EDC2D110C [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.manifest.json [2022-04-06 23:08][2022-04-06 23:08] 000000268 _____ () 9F0F2D21F488DA09B1719D00882B6D6D [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MbamBgNativeMsg.exe [2022-04-06 23:08][2022-04-06 23:08] 002860216 _____ (Malwarebytes) 8EDA23E8B47631C735B3D9499C969D49 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMCore.dll [2022-04-06 23:08][2022-03-30 20:43] 006472936 _____ (Malwarebytes) 47810D1F6C9EDB368FD8D31866271C35 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.cat [2022-04-06 23:08][2022-04-06 23:08] 000010009 _____ () 7453833781787689F45A16F8DC9038F1 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.inf [2022-04-06 23:08][2022-04-06 23:08] 000002163 _____ () C481AD4DD1D91860335787AA61177932 [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamelam.sys [2022-04-06 23:08][2022-04-06 23:08] 000019912 _____ (Malwarebytes) BF46AFE0CC03D9A5883E74438170B841 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMInstallerService.exe [2021-09-26 18:35][2022-04-06 23:08] 007273144 _____ (Malwarebytes) 695B2CEECE00C82D4DE0819CD344665C [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MbamPt.exe [2022-04-06 23:08][2022-04-06 23:08] 000021008 _____ (Malwarebytes) 63B788C7D70919A0BED3DDC3E64C3077 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMService.exe [2022-04-06 23:08][2022-04-06 23:08] 008348856 _____ (Malwarebytes) 34B32A16508760E174ABB1A4CD37D8CD [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMShim.dll [2022-04-06 23:08][2022-04-06 23:08] 003066552 _____ (Malwarebytes) C8422FC6E90EE7AC1BD610BBDC518412 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbamtray.exe [2022-04-06 23:08][2022-04-06 23:08] 007078072 _____ (Malwarebytes) 23EE636270C5B04B43FA6935D9B60027 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\MBAMWsc.exe [2022-04-06 23:08][2022-04-06 23:08] 002376736 _____ (Malwarebytes) 3AAFC4BA7BBE49E318ED008E0005A6E3 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.cat [2022-04-06 23:08][2022-04-06 23:08] 000011240 _____ () D46420154510E1D88DBE7B85C6ABCB6A [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.inf [2022-04-06 23:08][2022-04-06 23:08] 000003109 _____ () E5BB98E4D7ADF79CF7355AEB4A12D3C4 [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.sys [2022-04-06 23:08][2022-04-06 23:08] 000223688 _____ (Malwarebytes) 80918D7EEFEE588D4E5377B521B83E1D [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\mbamchameleon.tmf [2022-04-06 23:08][2022-04-06 23:08] 000147097 _____ () 6C0AD11A2114B621201EB8CEC12E1BB9 [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.cat [2022-04-06 23:08][2022-04-06 23:08] 000010854 _____ () D3F3D92B3AD4407053621A0C353D2968 [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.inf [2022-04-06 23:08][2022-04-06 23:08] 000002276 _____ () 0FF3F3BA83E1DC78AA42E205E1A01867 [Fichier non signé] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.sys [2022-04-06 23:08][2022-04-06 23:08] 000248992 _____ (Malwarebytes) 0B17A8F4956ABD5FA1A0851B59FF960E [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\sdk\MBAMSwissArmy.tmf [2022-04-06 23:08][2022-04-06 23:08] 000159868 _____ () 3093D6869C16FE6AF563B3F5C71A5F06 [Fichier non signé] dossier: ======== 2021-12-17 22:54 - 2021-12-17 22:54 _____ C:\Users\33658\AppData\Local\CrashDumps\Malwarebytes 2021-12-21 22:14 - 2021-12-21 22:14 ____C C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mbam.exe_302f2d7f93313ef877b342879a486e1afa4f34f4_6b68dbb4_04dfeb66-8659-4473-a07a-8ab197e6313c Registre: ======== ===================== Résultats de recherche pour "mbam" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2058A31F-5F59-4452-9204-03F588252FFC}] ""="IMBAMServiceControllerV6" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E0F1EE6-E7CA-4BEE-8C08-0959842DA615}] ""="IMBAMServiceControllerV7" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA1D4FDD-C9C8-4575-A2A1-4179C3A3473D}] ""="IMBAMServiceControllerV5" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2058A31F-5F59-4452-9204-03F588252FFC}] ""="IMBAMServiceControllerV6" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4E0F1EE6-E7CA-4BEE-8C08-0959842DA615}] ""="IMBAMServiceControllerV7" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FA1D4FDD-C9C8-4575-A2A1-4179C3A3473D}] ""="IMBAMServiceControllerV5" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION] "mbam.exe"="11000" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION] "mbamtray.exe"="11000" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\MBAMService.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}] "PRODUCTEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}] "REPORTINGEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AvTracking\ExpiredExeUnconditional\MBAMWsc.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\WicaAvPathsExpiredTemp] "1"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] "ServiceName"="MbamElam" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] "Path"="\SystemRoot\system32\DRIVERS\MbamElam.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] "Path.Org"="system32\DRIVERS\MbamElam.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] "Path.Win32"="C:\Windows\System32\drivers\MbamElam.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MbamElam] "DisplayName"="MbamElam" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] "ServiceName"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] "Path"="\SystemRoot\System32\Drivers\mbamswissarmy.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] "Path.Org"="\SystemRoot\System32\Drivers\mbamswissarmy.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] "Path.Win32"="C:\Windows\System32\drivers\mbamswissarmy.sys" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\MBAMSwissArmy] "DisplayName"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService] "ImagePath"=""C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService] "DisplayName"="Malwarebytes Installer Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters] "ProductCode"="MBAM-C" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters] "ProgramDirectory"="C:\Program Files\Malwarebytes\Anti-Malware" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters] "MbamUpgrade"="1" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters] "checkedMbamWscCert"="1" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\644f10e9_0] ""="{2}.\\?\intelaudio#func_01&ven_10ec&dev_0236&subsys_10280a7e&rev_1000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\rearlineouttoposst3/00010001|\Device\HarddiskVolume3\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe%b{00000000-0000-0000-0000-000000000000}" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe"="0x5341435001000000000000000700000028000000B8840C016D850C0101000000000000000000000A7322000010245A0F035AD70100000000000000000500000010000000000000000000000000000000000000000200000050000000000000000000004000000000000000000000000000000000EFA40900000000000100000001000000000000000000000000000000000000000000000000000000836F0000000000000400000000000000" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.FriendlyAppName"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.ApplicationCompany"="Malwarebytes" ===================== Résultats de recherche pour "malwarebytes" ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes] ""="URL:Malwarebytes Protocol" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes\DefaultIcon] ""="C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\malwarebytes\shell\open\command] ""=""C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe" -uri "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}] "DISPLAYNAME"="Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}] "PRODUCTEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{23007AD3-69FE-687C-2629-D584AFFAF72B}] "REPORTINGEXE"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbam.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MBAMService.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\mbamtray.exe] "DumpFolder"="%LOCALAPPDATA%\CrashDumps\Malwarebytes" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\WicaAvPathsExpiredTemp] "1"="C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 185, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime", "r:DefaultUserRegion", "a:GatedFeature_NI22H2", "r:WSX_Windows_Shell_Start" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue", "c:ProcessorModel" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey", "v:FileExistsMscoreeDll", "w:NetFx3State", "r:WCFHTTPActivationNotificationState", "w:WCFHTTPActivationState", "r:WCFNonHTTPActivationNotificationState", "w:WCFNonHTTPActivationState", "r:DotNetMissingComponentsTroubleshooterSuccess", "r:IIS_ASPNET", "w:IIS_ASPNET_WMI", "r:IIS_NetFxExtensibility", "w:IIS_NetFxExtensibility_WMI", "r:WAS_NetFxEnvironment", "w:WAS_NetFxEnvironment_WMI", "v:XamlCbsActivationStore", "v:XamlCbsActivationStoreArm64", "v:OnnxruntimeVer", "w:ElanFingerprintDriverVersion" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp", "a:UpgEx_NI22H2", "r:OobeNdupAcceptedTarget", "r:OobeNdupFU22621CommitChoice", "a:DataExpDateEpoch_NI22H2", "a:GStatus_NI22H2", "a:GStatus_NI22H2Setup", "a:TimestampEpochString_NI22H2Setup", "a:TimestampDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateEpoch_NI22H2Setup", "a:TimestampEpochString_NI22H2" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DotNetMissingComponentsTroubleshooterSuccess": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\.NETFramework", "ValueName": "DotNetMissingComponentsTroubleshooterSuccess", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "IIS_ASPNET": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "IIS_NetFxExtensibility": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "NPUEnabledDevice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects", "ValueName": "EffectsCameraAvailable", "RegValueType": "REG_DWORD" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeNdupAcceptedTarget": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates", "ValueName": "Target", "RegValueType": "REG_SZ" }, "OobeNdupFU22621CommitChoice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621", "ValueName": "CommitChoice", "RegValueType": "REG_DWORD" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WAS_NetFxEnvironment": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFNonHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" }, "WSX_Windows_Shell_Start": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Shell.StartMenu", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "FileExistsMscoreeDll": { "Path": "%windir%\\\\system32\\\\mscoree.dll", "IfExists": true }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "OnnxruntimeVer": { "Path": "%windir%\\\\system32\\\\onnxruntime.dll" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "XamlCbsActivationStore": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true }, "XamlCbsActivationStoreArm64": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "ElanFingerprintDriverVersion": { "Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'", "Name": "DriverVersion", "Timeout": 2000 }, "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 }, "IIS_ASPNET_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'", "Name": "InstallState", "Timeout": 2000 }, "IIS_NetFxExtensibility_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'", "Name": "InstallState", "Timeout": 2000 }, "NetFx3State": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'", "Name": "InstallState", "Timeout": 2000 }, "WAS_NetFxEnvironment_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'", "Name": "InstallState", "Timeout": 2000 }, "WCFHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "WCFNonHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'", "Name": "InstallState", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 185, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime", "r:DefaultUserRegion", "a:GatedFeature_NI22H2", "r:WSX_Windows_Shell_Start" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "OEMModel", "c:OSUILocale", "c:OSEdition", "c:FlightIds", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue", "c:ProcessorModel" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey", "v:FileExistsMscoreeDll", "w:NetFx3State", "r:WCFHTTPActivationNotificationState", "w:WCFHTTPActivationState", "r:WCFNonHTTPActivationNotificationState", "w:WCFNonHTTPActivationState", "r:DotNetMissingComponentsTroubleshooterSuccess", "r:IIS_ASPNET", "w:IIS_ASPNET_WMI", "r:IIS_NetFxExtensibility", "w:IIS_NetFxExtensibility_WMI", "r:WAS_NetFxEnvironment", "w:WAS_NetFxEnvironment_WMI", "v:XamlCbsActivationStore", "v:XamlCbsActivationStoreArm64", "v:OnnxruntimeVer", "w:ElanFingerprintDriverVersion" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "p:DSS_Enrolled", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp", "a:UpgEx_NI22H2", "r:OobeNdupAcceptedTarget", "r:OobeNdupFU22621CommitChoice", "a:DataExpDateEpoch_NI22H2", "a:GStatus_NI22H2", "a:GStatus_NI22H2Setup", "a:TimestampEpochString_NI22H2Setup", "a:TimestampDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateEpoch_NI22H2Setup", "a:TimestampEpochString_NI22H2" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "deviceClass": "t:DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "p:DSS_Enrolled": "r:DSS_EnrolledReg", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "SMode": { "Ignore": [ "0" ] } }, "Registry": { "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DotNetMissingComponentsTroubleshooterSuccess": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\.NETFramework", "ValueName": "DotNetMissingComponentsTroubleshooterSuccess", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_EnrolledReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "EnableWUfBCloud", "RegValueType": "REG_DWORD" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "IIS_ASPNET": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "IIS_NetFxExtensibility": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "NPUEnabledDevice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects", "ValueName": "EffectsCameraAvailable", "RegValueType": "REG_DWORD" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeNdupAcceptedTarget": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates", "ValueName": "Target", "RegValueType": "REG_SZ" }, "OobeNdupFU22621CommitChoice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621", "ValueName": "CommitChoice", "RegValueType": "REG_DWORD" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "WAS_NetFxEnvironment": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFNonHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" }, "WSX_Windows_Shell_Start": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Shell.StartMenu", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "FileExistsMscoreeDll": { "Path": "%windir%\\\\system32\\\\mscoree.dll", "IfExists": true }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "OnnxruntimeVer": { "Path": "%windir%\\\\system32\\\\onnxruntime.dll" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "XamlCbsActivationStore": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true }, "XamlCbsActivationStoreArm64": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DSS_Enrolled": { "Area": "Update", "Name": "EnableWUfBCloud" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" } }, "WMI": { "ElanFingerprintDriverVersion": { "Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'", "Name": "DriverVersion", "Timeout": 2000 }, "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 }, "IIS_ASPNET_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'", "Name": "InstallState", "Timeout": 2000 }, "IIS_NetFxExtensibility_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'", "Name": "InstallState", "Timeout": 2000 }, "NetFx3State": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'", "Name": "InstallState", "Timeout": 2000 }, "WAS_NetFxEnvironment_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'", "Name": "InstallState", "Timeout": 2000 }, "WCFHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "WCFNonHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'", "Name": "InstallState", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\mbambgnativemsg.exe] ""="C:\Program Files\Malwarebytes\Anti-Malware\mbam.firefox.manifest.json" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService] "ImagePath"=""C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService] "DisplayName"="Malwarebytes Installer Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBAMInstallerService\Parameters] "ProgramDirectory"="C:\Program Files\Malwarebytes\Anti-Malware" [HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Malwarebytes Support Tool] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\DOMStorage\malwarebytes.com] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Internet Explorer\DOMStorage\www.malwarebytes.com] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated] "Malwarebytes.Antimalware"="15" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "Malwarebytes.Antimalware"="8" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData] "Malwarebytes.Antimalware"="132937531950437381" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Microsoft\Windows\CurrentVersion\UFH\SHC] "0"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Privacy (VPN).lnk C:\Program Files\Malwarebytes\Privacy\UI\MBPrivacy.exe " [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Policies\Microsoft\Office\15.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Policies\Microsoft\Office\16.0\Common\Security\Trusted Protocols\All Applications\malwarebytes:] [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\Downloads\MBSetup (1).exe.FriendlyAppName"="Malwarebytes Setup" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\Downloads\MBSetup (1).exe.ApplicationCompany"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\Downloads\MBSetup (2).exe.FriendlyAppName"="Malwarebytes Setup" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\Downloads\MBSetup (2).exe.ApplicationCompany"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.FriendlyAppName"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\MFW\O0195E0.tmp\Anti-Malware\mbam.exe.ApplicationCompany"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\Downloads\mb-support-1.8.7.918.exe.FriendlyAppName"="Malwarebytes Support Tool" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\7zSDB3E.tmp\mbstub.exe.ApplicationCompany"="Malwarebytes Corporation" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\mb-support.exe.ApplicationCompany"="Malwarebytes Corporation" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\MBSetup.exe.FriendlyAppName"="Malwarebytes Setup" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\mwbEE1A.tmp\MBSetup.exe.ApplicationCompany"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\3c260b90-8e6c-4bda-a92a-c1b186071346.exe.FriendlyAppName"="Malwarebytes Privacy Installer" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\3c260b90-8e6c-4bda-a92a-c1b186071346.exe.ApplicationCompany"="Malwarebytes" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\7zSDBCF.tmp\mbstub.exe.ApplicationCompany"="Malwarebytes Corporation" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\adf43473-a1fb-4010-8cf5-6482cb73272b.exe.FriendlyAppName"="Malwarebytes Privacy Installer" [HKEY_USERS\S-1-5-21-1461485193-2194240545-3802442472-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\33658\AppData\Local\Temp\adf43473-a1fb-4010-8cf5-6482cb73272b.exe.ApplicationCompany"="Malwarebytes" ====== Fin de Chercher ======