Farbar Recovery Scan Tool (x64) Version: 20-09-2023 Exécuté par Adélaïde (24-09-2023 18:34:02) Exécuté depuis C:\Users\Adélaïde\Desktop Mode d'amorçage: Normal ================== Chercher Fichiers: "searchall: mcafee" ============= Fichier: ======== C:\Windows\SysWOW64\oobe\info\Icon\McAfee.ico [2022-08-12 22:42][2021-08-02 14:58] 000001150 _____ () FF7441C3264D89023F376E5319DAD793 [Fichier non signé] C:\Windows\System32\Tasks_Migrated\McAfee Remediation (Prepare) [2022-08-12 22:37][2022-08-25 00:04] 000002650 _____ () 97A3A87525794E37DF277D6C71CF2435 [Fichier non signé] C:\Windows\System32\Tasks_Migrated\McAfeeLogon [2022-08-12 22:38][2023-09-11 18:52] 000003354 _____ () 256254B544EC8557FA01A44E6BE6D100 [Fichier non signé] C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Auto Maintenance Task Agent [2022-08-12 22:37][2023-09-11 18:51] 000003670 _____ () BBAF07BFF74B4CE6FF01C22D8F92029F [Fichier non signé] C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Idle Detection Task [2022-08-12 22:37][2023-09-11 18:51] 000003178 _____ () [Accès refusé] C:\Windows\System32\oobe\info\Icon\McAfee.ico [2022-08-12 22:42][2021-08-02 14:58] 000001150 _____ () FF7441C3264D89023F376E5319DAD793 [Fichier non signé] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~0235B3CB-95D1-4A58-AE80-65D45901FC90~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~04E4FA75-E03B-412D-B8E6-2BBC06B44FEB~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011420 ____S () 04D334D56F5E7A96D95A96361829F21E [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~058C7E93-3DAC-4276-9FD1-6F456EFED6E0~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011421 ____S () 8D0DC3742E442D74C950E6DFDB0CDD21 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~09A41FB4-EA73-492B-9083-4A7A96221008~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~0CE883D0-2AD4-4F5E-A9E3-62A3E8226D07~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011440 ____S () EA574337D796F752504D8960F1FC6D92 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~0D388B95-BD27-4BE3-8C01-0FB11C43994C~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010367 ____S () 86AD421887B9FAD089150F4A4AAC8EE4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~0F8F0631-17E2-45C2-BB7B-B27BA65A34D5~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011424 ____S () AB2FC3AE1A0776405D48028A54EBFEC4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~10A274C7-6390-47F1-AEDB-BA10F0524D1E~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () C26A0888FC95609F6DBA856B1A4E1B23 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~1C24571D-1B9D-425F-A169-93A2BFE75BD7~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~1C745F38-1C6A-40E3-9B43-3CFF8015B176~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~2EC365B8-0AA1-4749-9E0F-F123FEE8D200~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011432 ____S () C722A172CD40B243B1C2F7ADAD76A414 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~2F55C2B0-5302-4E9F-B51D-57FCBB89A660~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010363 ____S () 47EC0D787DD494A32C00912059B87DE8 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~2FBDCD03-9499-4118-A031-D0EE563F03CC~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~3655BF6E-9627-47DB-BA83-53361C7BE404~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011440 ____S () 75B846BE42A3DB530F0889426641B1C4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~41E11FC8-390C-4DA3-A51F-B120234F64F8~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011424 ____S () AB2FC3AE1A0776405D48028A54EBFEC4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~46BF2C12-3AF1-44D2-B83A-94F16467E122~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011440 ____S () 75B846BE42A3DB530F0889426641B1C4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~47438AEA-A528-460C-AB2D-03C71C52AEDF~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010363 ____S () A2314D3C458577D22E0C9D1190D9956A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~51269A48-48B9-4392-93CF-3178BC12F90C~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011421 ____S () 8D0DC3742E442D74C950E6DFDB0CDD21 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~514A92E1-45B6-483C-9CE9-8168DEE656FC~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011432 ____S () C722A172CD40B243B1C2F7ADAD76A414 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~537980DA-6E4C-4ABB-A27F-02BA5FF1CD22~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011440 ____S () 75B846BE42A3DB530F0889426641B1C4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~57ADF1B8-39FD-4E0A-92DA-1BCB20F4AD7A~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011421 ____S () 8D0DC3742E442D74C950E6DFDB0CDD21 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~64C52AA5-13DB-472E-8E1F-0134CAB5118F~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011420 ____S () 04D334D56F5E7A96D95A96361829F21E [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~8AB6E373-A6AB-4AFC-B031-5B22112BBCCA~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010363 ____S () 2DF4FE1B6D3B08D573605F168ABBB7BC [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~8C311174-B4DE-461D-A454-6A9C6FFE8AEA~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~8C7767F0-935C-4100-83F8-386E0C92EB88~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011440 ____S () EA574337D796F752504D8960F1FC6D92 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~8CEB58F6-30FB-48EC-A077-00E7CA194DCB~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011420 ____S () 04D334D56F5E7A96D95A96361829F21E [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~8EF0EC20-997C-475A-A443-7CBFA701EA36~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011432 ____S () C722A172CD40B243B1C2F7ADAD76A414 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~980A9482-1DB3-4CFA-B12C-F2DBFA85367C~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011421 ____S () 8D0DC3742E442D74C950E6DFDB0CDD21 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~98C00819-FE67-46CF-9BF6-CB6571789B2E~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~9AF029E5-6E8C-4238-AACE-95FA1BB232BC~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010356 ____S () 0BC622475C2EC007287C8FBECB610843 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~A449F829-D2F7-49A2-94FB-924E99AFA4BA~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () C26A0888FC95609F6DBA856B1A4E1B23 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~A630351E-A700-4FDF-83B6-DE2933DEE0AB~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011440 ____S () EA574337D796F752504D8960F1FC6D92 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~A6EF9B23-E671-4B33-91B0-A0A18E6EE36C~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010367 ____S () B61D2DB4B83BF914EB1F30D1B0B21C81 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~AB5BD7DB-FCD0-4A1C-8D0E-9CFDB368EC21~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011440 ____S () EA574337D796F752504D8960F1FC6D92 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~AF406DC7-C319-4912-8262-1791295C1933~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011440 ____S () 75B846BE42A3DB530F0889426641B1C4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~B10A9D3A-71DA-4D04-8F99-391E233CAB03~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011424 ____S () AB2FC3AE1A0776405D48028A54EBFEC4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~B77C6F96-E369-4056-AF32-317507ACFF8D~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011420 ____S () 04D334D56F5E7A96D95A96361829F21E [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~C1C967E8-DAC9-4AEA-A080-56821448ED77~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010358 ____S () 691457B3F210057214172AB6B00CB512 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~C502AB88-1019-46D0-998E-B430BFCA8BE4~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () C26A0888FC95609F6DBA856B1A4E1B23 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~C7FC0F87-1ECD-4AEF-B8E3-18097E057396~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011436 ____S () 24364635D879DF43574F1F5E07A2717A [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~CF9C21D5-F0A2-4CC1-9D44-54EDAA216870~amd64~~22.12.0.211.5.cat [2023-09-11 20:47][2023-04-05 02:39] 000011424 ____S () AB2FC3AE1A0776405D48028A54EBFEC4 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~DC76B8B1-D67B-419A-8558-8A843261E18D~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011432 ____S () C722A172CD40B243B1C2F7ADAD76A414 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~EF630B6A-7122-4A35-AAB8-4BB9C8AFA643~amd64~~22.12.0.211.5.cat [2023-09-11 18:51][2023-04-05 02:39] 000011436 ____S () C26A0888FC95609F6DBA856B1A4E1B23 [Le fichier est signé numériquement] C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee-VSCore~FDAD3883-DBC5-4DE2-9415-61EEEC1B7219~amd64~~21.09.0.167.5.cat [2022-08-12 22:38][2021-09-28 14:02] 000010363 ____S () CB2833EDDFB220195BB4AE42DA033D24 [Le fichier est signé numériquement] C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor.json [2023-09-11 08:38][2023-09-20 09:08] 000000305 _____ () 3053551C6DD7ABC2B5E7BD9B3AE08D72 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor_v2.json [2023-09-11 08:38][2023-09-20 09:08] 000000304 _____ () 43E7296F1AED38F485EEA244C4A6603F [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.chrome.extension.json [2023-09-11 08:38][2023-09-20 09:08] 000000615 _____ () C818E90178C96918E3002C360B0287EE [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.firefox.extension.json [2023-09-11 08:38][2023-09-20 09:08] 000000273 _____ () 9ABA83469155A497D2BCEB55D94C5A36 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.chrome.extension.json [2023-09-11 08:38][2023-09-20 09:08] 000000614 _____ () 99EEDE6E82604A4788969A97A0D30123 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.firefox.extension.json [2023-09-11 08:38][2023-09-20 09:08] 000000272 _____ () D08B98E465C9ACA3C6533D3AC4A9F883 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\tests\score\pscore_mcafee_logo.png [2023-09-11 08:38][2023-09-20 09:08] 000003442 _____ () 857F7BDFB5EB00AAA643F1288B5A391A [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-logo-1.png [2023-09-11 08:38][2023-09-20 09:08] 000001559 _____ () FA83BC8E14C9D2734DDBE84015E5BF3A [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-logo-lg.png [2023-09-11 08:38][2023-09-20 09:08] 000001940 _____ () 2E6E7984268E9D344B13491198D160B0 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-logo.png [2023-09-11 08:38][2023-09-20 09:08] 000002238 _____ () 2B2ED7BD7CD047459628DC4AE1728E85 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-logo2.png [2023-09-11 08:38][2023-09-20 09:08] 000001201 _____ () A624A806CD38AA64130A0C228271DE75 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee-wa-logo.png [2023-09-11 08:38][2023-09-20 09:08] 000002089 _____ () 96D3FBD61D479F4F188A025B53D4B63C [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafeeicon.ico [2023-09-11 08:38][2023-09-20 09:08] 000285478 _____ () F7D9142AC3C0C7228507E927D05F9727 [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee_pc_install_icon.png [2023-09-11 08:38][2023-09-20 09:08] 000002052 _____ () 18344204EC04F1E95E086D3BC94FA0FD [Fichier non signé] C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\mcafee_pc_install_icon2.png [2023-09-11 08:38][2023-09-20 09:08] 000007205 _____ () F2E3045621ADE164E9DA40F294BEB00C [Fichier non signé] C:\FRST\Quarantine\C\Windows.old\Windows\Microsoft.NET\assembly\GAC_64\McAfee.CSP.ClientAPI\v4.0_5.5.107.0__a63667ab4267742d\McAfee.CSP.ClientAPI.dll [2023-09-11 18:52][2023-09-11 18:52] 000034272 _____ (McAfee, LLC) 8FC13BC710736B2258B7772312B39CDB [Le fichier est signé numériquement] C:\FRST\Quarantine\C\Windows.old\Users\Adélaïde\AppData\Local\Microsoft\Windows\INetCache\IE\V8BBP9NP\McAfee-white-logo[1].png [2023-09-11 09:59][2023-09-11 09:59] 000002176 _____ () 07D1DA1A80E2AB9ED8BB179EF2495711 [Fichier non signé] C:\FRST\Quarantine\C\Users\Adélaïde\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Tombstones\McAfee LiveSafe.lnk.xBAD [2023-09-24 10:41][2023-09-11 08:38] 000002029 _____ () CCBC07C5A3571C287F250368AC2266C8 [Fichier non signé] dossier: ======== 2022-08-12 22:37 - 2023-09-11 20:21 _____ C:\Windows\System32\Tasks_Migrated\McAfee 2023-09-11 18:55 - 2023-09-11 18:55 _____ C:\Users\Adélaïde\AppData\Local\McAfee 2023-09-24 11:55 - 2023-09-24 11:55 _____ C:\ProgramData\McAfee 2022-08-12 22:37 - 2023-09-24 10:46 _____ C:\Program Files\McAfee 2023-09-11 18:52 - 2023-09-11 18:52 _____ C:\FRST\Quarantine\C\Windows.old\Windows\Microsoft.NET\assembly\GAC_64\McAfee.CSP.ClientAPI 2023-09-11 18:57 - 2023-09-11 21:43 _____ C:\FRST\Quarantine\C\Windows.old\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2023-09-24 10:40 - 2023-09-24 10:40 _____ C:\FRST\Quarantine\C\Users\Adélaïde\AppData\Roaming\McAfee 2022-08-12 22:37 - 2023-09-24 10:48 _____ C:\FRST\Quarantine\C\ProgramData\McAfee Registre: ======== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{117151a5-951b-477e-91a4-699c7d9d66a2}\InprocServer32] ""="C:\Program Files\McAfee\WebAdvisor\x64\DownloadScan.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}] ""="McAfee SiteAdvisor MISP Integration" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32] ""="C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\McAfeeExtn] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{117151a5-951b-477e-91a4-699c7d9d66a2}\InprocServer32] ""="C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}] ""="McAfee SiteAdvisor MISP Integration" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{21CBFEC0-E728-420C-B4A4-A58AD2089ABA}\InprocServer32] ""="C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{599A2E47-16D2-468B-ABF6-4E6642EFC460}\InprocServer32] ""="C:\Program Files (x86)\Common Files\McAfee\Platform\mcbr3264.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{93219F69-B9C9-4679-93AE-3572FB10E7AA}\InprocServer32] ""="C:\Program Files (x86)\Common Files\McAfee\Platform\mcbr3264.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.chrome.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.chrome.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MSC\Settings\protcat\AA747A62-493D-4082-A2EF-C4AD2049AA21\0F167695-3F7C-421c-89E8-40544CE9D1A2\installed] "LinkContext"="https://www.mcafee.com/consumer/v/wa-how.html" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MSC\Settings\toc\A12341F7-A130-4447-97AD-2675F46516FB] "LinkContext"="https://www.mcafee.com/consumer/v/wa-how.html" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor] "Icon"="C:\Program Files\McAfee\WebAdvisor\WebAdvisor.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor] "Install Dir"="C:\Program Files\McAfee\WebAdvisor" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\AnalyticsManager] "Path"="C:\Program Files\McAfee\WebAdvisor\AnalyticsManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\EventManager] "Path"="C:\Program Files\McAfee\WebAdvisor\EventManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\LookupManager] "Path"="C:\Program Files\McAfee\WebAdvisor\LookupManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\SettingManager] "Path"="C:\Program Files\McAfee\WebAdvisor\SettingManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\TaskManager] "Path"="C:\Program Files\McAfee\WebAdvisor\TaskManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\ServiceHost\WATaskManager] "Path"="C:\Program Files\McAfee\WebAdvisor\WATaskManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\UIHost\LogicModule] "Path"="C:\Program Files\McAfee\WebAdvisor\LogicModule.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\WebAdvisor\UIHost\UIManager] "Path"="C:\Program Files\McAfee\WebAdvisor\UIManager.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor_v2.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftEdge\Main\FavoriteBarItems\Favorite1] "ItemFavIconFile"="C:\\Windows\\system32\\oobe\\info\\icon\\McAfee.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftEdge\Main\FavoriteBarItems\Favorite1] "ItemName"="McAfee Antivirus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftEdge\Main\FavoriteBarItems\Favorite1] "ItemUrl"="http://www.mcafee.com/consumer/v/browserfav/medion.html" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP] "12"="Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A} C:\Program Files\McAfee\WebAdvisor\Uninstaller.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributes"="{ "Version": 247, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "APPTARGETEDFEATUREDB": [ "c:FlightingBranchName", "f:FlightRing", "t:OSVersionFull", "DeviceFamily" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime", "r:DefaultUserRegion", "a:GatedFeature_NI22H2", "r:WSX_Windows_Shell_Start", "a:GatedFeature_CU23H2", "r:ExpStates", "MX_FlightIds", "n:MXVersion", "r:CIOptin", "c:ProcessorCores", "c:TotalPhysicalRAM", "r:TestRN", "u:UpdateServiceUrl", "u:WUfBClientManaged", "r:UUSVersion", "DL_OSVersion", "r:ExpPkgs", "u:AllowOptionalContent", "n:IsMicrosoftAAD", "q:WidgetsAppVer", "c:IsDeviceRetailDemo" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice", "MX_FlightIds", "r:KnownFoldersBackupStatus", "c:IsDomainJoined" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled", "f:IsFlightingEnabled", "r:DeviceInfoGatherSuccessful" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "+IRISCLIENTBASE", "c:FlightIds" ], "IRISCLIENTBASE": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "OEMModel", "c:OSUILocale", "c:OSEdition", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue", "c:ProcessorModel", "MX_FlightIds", "a:UpgEx_CO21H2", "r:KnownFoldersBackupStatus", "c:OEMModelSystemFamily", "OEMName_Uncleaned", "r:IsSpotlightEnabledInOEMTheme", "r:IsSpotlightThemeEnabledByOEM", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentPromptAllowed" ], "IRISCLIENTV2": [ "+IRISCLIENTBASE", "IX_FlightIds" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey", "v:FileExistsMscoreeDll", "w:NetFx3State", "r:WCFHTTPActivationNotificationState", "w:WCFHTTPActivationState", "r:WCFNonHTTPActivationNotificationState", "w:WCFNonHTTPActivationState", "r:DotNetMissingComponentsTroubleshooterSuccess", "r:IIS_ASPNET", "w:IIS_ASPNET_WMI", "r:IIS_NetFxExtensibility", "w:IIS_NetFxExtensibility_WMI", "r:WAS_NetFxEnvironment", "w:WAS_NetFxEnvironment_WMI", "v:XamlCbsActivationStore", "v:XamlCbsActivationStoreArm64", "v:OnnxruntimeVer", "w:ElanFingerprintDriverVersion", "r:AADBrokerPluginNotRegistered", "r:TenantId", "r:IppPrinterBadDefaultPdc", "r:FlightingOptOutState", "r:CloudFilesFilter", "r:PSAKyoceraMissingDEH", "r:PSATATriumphMissingDEH", "r:PSAXeroxMissingDEH", "w:PSAKyoceraInstalledName", "w:PSATATriumphInstalledName", "w:XeroxPsaInstalledName" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType", "FX_FlightIds" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NARRATORNNV": [ "+WU_STORE" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName", "OEMModel", "c:OEMManufacturerName", "c:OSUILocale", "r:OEMSubModel", "DeviceFamily" ], "RULESENGINE": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice", "MX_FlightIds", "r:KnownFoldersBackupStatus", "c:IsDomainJoined", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentPromptAllowed" ], "RUXIM": [ "c:ActivationChannel", "f:FlightRing", "r:InstallDate", "f:IsFlightingEnabled", "a:ISVM", "OEMModel", "OSArchitecture", "t:OSSkuId", "c:SCCMClientID", "r:SetupDisplayedEulaVersion", "r:KioskMode", "r:OobeSeeker", "r:UninstallActive", "c:OEMManufacturerName", "r:OEMSubModel" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime", "r:WSX_Windows_Shell_Start", "r:WSX_Windows_AppSample" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "SMARTOPTOUT": [ "+CDM" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType", "t:IsTestLab", "c:TelemetryLevel", "c:IsVirtualDevice", "r:IsProcessorMode", "r:UtcDataHandlingPolicies" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel", "r:FlightingOptOutState" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay", "OSVersion" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion", "r:TenantId" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion", "DSS_Enrolled", "r:NonSecurityUpdate" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp", "a:UpgEx_NI22H2", "r:OobeNdupAcceptedTarget", "r:OobeNdupFU22621CommitChoice", "a:DataExpDateEpoch_NI22H2", "a:GStatus_NI22H2", "a:GStatus_NI22H2Setup", "a:TimestampEpochString_NI22H2Setup", "TimestampDelta_NI22H2SubtractNI22H2Setup", "DataExpDateDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateEpoch_NI22H2Setup", "a:TimestampEpochString_NI22H2", "r:IsVbsEnabled", "r:FODRetryPending", "r:UserInPlaceUpgrade", "v:HidparseDriversVer", "v:HidparseSystem32Ver", "v:HidparseSystem32Ver1", "r:CIOptin", "r:FlightingOptOutState", "p:WSUSconfigured_csp", "a:UpgEx_NI22H2Setup", "a:UpgEx_CO21H2Setup", "u:WUfBClientManaged", "u:UpdateServiceUrl", "u:AllowOptionalContent", "FX_FlightIds", "DL_OSVersion", "r:ExpPkgs", "r:UUSVersion" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "DataExpDateDelta_NI22H2SubtractNI22H2Setup": "a:DataExpDateEpoch_NI22H2_Subtract_DataExpDateEpoch_NI22H2Setup", "deviceClass": "DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "DL_OSVersion2": "DL_OSVersion", "DSS_Enrolled": "r:DSS_Enrolled_State", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "IX_FlightIds": "c:FlightIds", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "MX_FlightIds": "c:FlightIds", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup", "TimestampDelta_NI22H2SubtractNI22H2Setup": "a:TimestampEpochString_NI22H2_Subtract_TimestampEpochString_NI22H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "DL_OSVersion": "OSVersion", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GatedFeature_NI22H2": "r:Migrated_GatedFeature_NI22H2Setup", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "r:Migrated_GatedFeature_NI22H2Setup": "r:Migrated_GatedFeature_NI22H2", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "DeviceInfoGatherSuccessful": { "Ignore": [ "0" ] }, "FlightingOptOutState": { "Ignore": [ "0" ] }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IppPrinterBadDefaultPdc": { "Contains": "V4_No_ChangeID_Present" }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "IX_FlightIds": { "Regex": "IX:[^,]*", "RegexDelimiter": "," }, "MX_FlightIds": { "Regex": "ME:[^,]*|MD:[^,]*", "RegexDelimiter": "," }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "PSAKyoceraInstalledName": { "Contains": "A97ECD55.KYOCERAPrintCenter" }, "PSATATriumphInstalledName": { "Contains": "TATriumph-AdlerGmbH.TAUTAXPrintCenter" }, "SMode": { "Ignore": [ "0" ] }, "StayOnWindows10Timestamp": { "SubLength": -3, "Ignore": [ "" ] }, "XeroxPsaInstalledName": { "Contains": "XeroxCorp.PrintExperience" } }, "Registry": { "AADBrokerPluginNotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsMitigationData\\AADBrokerPluginNotRegistered", "IfExists": true }, "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CIOptin": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "IsContinuousInnovationOptedIn", "RegValueType": "REG_DWORD" }, "CloudFilesFilter": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\CldFlt\\Instances\\", "ValueName": "DefaultInstance", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DeviceInfoGatherSuccessful": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing", "ValueName": "DeviceInfoGatherSuccessful", "RegValueType": "REG_DWORD" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DotNetMissingComponentsTroubleshooterSuccess": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\.NETFramework", "ValueName": "DotNetMissingComponentsTroubleshooterSuccess", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_Enrolled_State": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WufbDS", "ValueName": "enrollmenttype", "RegValueType": "REG_SZ" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "ExpPkgs": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "ExpPkgs", "RegValueType": "REG_SZ" }, "ExpStates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\FIDs", "ValueName": "PreviewConfigs", "RegValueType": "REG_SZ" }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FlightingOptOutState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\UI\\Selection", "ValueName": "OptOutState", "RegValueType": "REG_DWORD" }, "FODRetryPending": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing", "ValueName": "FODRetry", "RegValueType": "REG_DWORD" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ", "PersistedSourceId": "COAWOSRoot" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "IIS_ASPNET": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "IIS_NetFxExtensibility": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IppPrinterBadDefaultPdc": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\*\\PrinterDriverData", "ValueName": "V4_PDC_ChangeID", "RegValueType": "REG_SZ", "EncodingType": "Json" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsProcessorMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\RegionalSettings", "ValueName": "IsProcessorMode", "RegValueType": "REG_QWORD" }, "IsSpotlightEnabledInOEMTheme": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes", "ValueName": "WindowsSpotlight", "RegValueType": "REG_DWORD" }, "IsSpotlightThemeEnabledByOEM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\DesktopOptimization", "ValueName": "WindowsSpotlightTheme", "RegValueType": "REG_DWORD" }, "IsVbsEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\ControlSet001\\Control\\DeviceGuard", "ValueName": "EnableVirtualizationBasedSecurity", "RegValueType": "REG_DWORD" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "KnownFoldersBackupStatus": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StorageProviderStatus", "ValueName": "OneDrive", "RegValueType": "REG_SZ" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "Migrated_GatedFeature_NI22H2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\MigratedMarkers\\TargetVersionUpgradeExperienceIndicators\\NI22H2", "ValueName": "GatedFeatureSingleString", "RegValueType": "REG_SZ" }, "Migrated_GatedFeature_NI22H2Setup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\MigratedMarkers\\TargetVersionUpgradeExperienceIndicators\\NI22H2Setup", "ValueName": "GatedFeatureSingleString", "RegValueType": "REG_SZ" }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "NonSecurityUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "NonSecurityRelease", "RegValueType": "REG_DWORD" }, "NPUEnabledDevice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects", "ValueName": "EffectsCameraAvailable", "RegValueType": "REG_DWORD" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeNdupAcceptedTarget": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates", "ValueName": "Target", "RegValueType": "REG_SZ" }, "OobeNdupFU22621CommitChoice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621", "ValueName": "CommitChoice", "RegValueType": "REG_DWORD" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "PSAKyoceraMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\A97ECD55.KYOCERAPrintCenter_4.1.11108.0_x64__kqmhh0ktdt7dg", "IfExists": true }, "PSATATriumphMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\TATriumph-AdlerGmbH.TAUTAXPrintCenter_4.1.11108.0_x64__h5e8vsnevp54y", "IfExists": true }, "PSAXeroxMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8", "IfExists": true }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TenantId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\CloudDomainJoin\\JoinInfo\\*", "ValueName": "TenantId" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "TestRN": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Wosc\\Client\\Persistent\\ClientState\\FCON", "ValueName": "TestRing" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UserInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UserInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "UtcDataHandlingPolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack", "ValueName": "UtcDataHandlingPolicies", "RegValueType": "REG_QWORD" }, "UUSVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator", "ValueName": "LastRunVersion", "RegValueType": "REG_SZ" }, "WAS_NetFxEnvironment": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFNonHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsAccountSyncConsentApplicable": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT", "ValueName": "isApplicable", "RegValueType": "REG_DWORD" }, "WindowsAccountSyncConsentPromptAllowed": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT", "ValueName": "isSystemInitiatedPromptAllowed", "RegValueType": "REG_DWORD" }, "WindowsAccountSyncConsentState": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT\\DATASHARING", "ValueName": "isConsentAccepted", "RegValueType": "REG_DWORD" }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_AppSample": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.AppSample", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" }, "WSX_Windows_Shell_Start": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Shell.StartMenu", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "FileExistsMscoreeDll": { "Path": "%windir%\\\\system32\\\\mscoree.dll", "IfExists": true }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "HidparseDriversVer": { "Path": "%windir%\\system32\\drivers\\hidparse.sys" }, "HidparseSystem32Ver": { "Path": "%windir%\\system32" }, "HidparseSystem32Ver1": { "Path": "%windir%\\system32\\hidparse.sys" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "OnnxruntimeVer": { "Path": "%windir%\\\\system32\\\\onnxruntime.dll" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "XamlCbsActivationStore": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true }, "XamlCbsActivationStoreArm64": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "AllowOptionalContent": { "PolicyEnum": 58, "Enterprise": true }, "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 }, "WUfBClientManaged": { "PolicyEnum": 32, "Enterprise": true } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" }, "WSUSconfigured_csp": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/UpdateServiceUrl" } }, "AppInfo": { "WidgetsAppVer": { "Name": "MicrosoftWindows.Client.WebExperience" } }, "WMI": { "ElanFingerprintDriverVersion": { "Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'", "Name": "DriverVersion", "Timeout": 2000 }, "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 }, "IIS_ASPNET_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'", "Name": "InstallState", "Timeout": 2000 }, "IIS_NetFxExtensibility_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'", "Name": "InstallState", "Timeout": 2000 }, "NetFx3State": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'", "Name": "InstallState", "Timeout": 2000 }, "PSAKyoceraInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'A97ECD55.KYOCERAPrintCenter_4.1.11108.0_x64__kqmhh0ktdt7dg'", "Name": "Name", "Timeout": 2000 }, "PSATATriumphInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'TATriumph-AdlerGmbH.TAUTAXPrintCenter_4.1.11108.0_x64__h5e8vsnevp54y'", "Name": "Name", "Timeout": 2000 }, "WAS_NetFxEnvironment_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'", "Name": "InstallState", "Timeout": 2000 }, "WCFHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "WCFNonHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "XeroxPsaInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8'", "Name": "Name", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings] "TargetingAttributesVerified"="{ "Version": 247, "SchemaVersion": 1, "PartA": [ "App", "AppVer", "AttrDataVer" ], "Default": [ "DeviceFamily", "f:FlightRing", "t:OSVersionFull" ], "PartB": { "ACSOVERRIDE": [ "OSArchitecture", "c:IsAlwaysOnAlwaysConnectedCapable" ], "APPTARGETEDFEATUREDB": [ "c:FlightingBranchName", "f:FlightRing", "t:OSVersionFull", "DeviceFamily" ], "CASSCLIENT": [ "OSVersion", "c:OSEdition", "f:FlightRing", "c:OSUILocale", "f:FlightingBranchName", "r:OEMMode" ], "CDM": [ "ChassisTypeId", "r:CurrentBranch", "DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "c:InstallLanguage", "c:IsDomainJoined", "t:IsTestLab", "OEMModel", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:ProcessorIdentifier", "c:TelemetryLevel", "t:IsMsftOwned", "t:WCOSProductId", "c:OSUILocale", "c:CommercialId", "s:MinShellVersion", "s:MaxShellVersion", "c:ActivationChannel", "c:SCCMClientId", "c:IsCloudDomainJoined", "r:WebExperience", "FX_FlightIds", "AccountFirstChar", "r:WSX_Windows_Settings_Account", "r:InstallDate", "r:WSX_Runtime", "r:DefaultUserRegion", "a:GatedFeature_NI22H2", "r:WSX_Windows_Shell_Start", "a:GatedFeature_CU23H2", "r:ExpStates", "MX_FlightIds", "n:MXVersion", "r:CIOptin", "c:ProcessorCores", "c:TotalPhysicalRAM", "r:TestRN", "u:UpdateServiceUrl", "u:WUfBClientManaged", "r:UUSVersion", "DL_OSVersion", "r:ExpPkgs", "u:AllowOptionalContent", "n:IsMicrosoftAAD", "q:WidgetsAppVer", "c:IsDeviceRetailDemo" ], "COMPATLOGGER": [ "osVer", "ring", "deviceId" ], "CONTENT_DELIVERY_MANAGER": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice", "MX_FlightIds", "r:KnownFoldersBackupStatus", "c:IsDomainJoined" ], "CORTANA_GATEKEEPER": [ "r:CurrentBranch", "f:FlightRing", "f:IsRetailOS" ], "CORTANAUWP": [ "c:OSUILocale", "t:OSVersionFull", "v:CortanaAppVer" ], "CORTANAUWPTEST": [ "+CORTANAUWP", "v:CortanaAppVerTest" ], "CTAC": [ "+FSS" ], "DDC": [ "+WU_STORE", "+_WU_PTI" ], "DXDB": [ "DeviceFamily", "f:FlightRing", "r:IsHybridOrXGpu", "t:OSVersionFull", "OSVersion" ], "EDGE_SERVICEUI": [ "t:LocalDeviceID", "t:LocalUserID" ], "FCON": [ "+CDM" ], "FSS": [ "r:PreviewBuildsManagerEnabled", "f:BranchReadinessLevelRaw", "u:BranchReadinessLevelSource", "r:BuildFID", "t:DeviceFamily", "DeviceId", "c:EnablePreviewBuilds", "f:FlightingPolicyValue", "f:IsRetailOS", "f:ManagePreviewBuilds", "OSVersionFull", "t:WCOSProductId", "r:SmartActiveHoursState", "r:ActiveHoursStart", "r:ActiveHoursEnd", "r:IsCHCapableBuild", "r:FSRing", "s:MaxShellVersion", "s:MinShellVersion", "c:TPMVersion", "c:SecureBootCapable", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:TotalPhysicalRAM", "t:SMode", "c:SystemVolumeTotalCapacity", "c:OEMManufacturerName", "c:OEMModelNumber", "a:ISVM", "r:AllowUpgradesWithUnsupportedTPMOrCPU", "r:IntelPlatformId", "r:IsConfigMgrEnabled", "f:IsFlightingEnabled", "r:DeviceInfoGatherSuccessful" ], "FXIRISCLIENT": [ "+IRISCLIENT" ], "GS": [ "t:OSSkuId", "t:OSVersionFull", "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "c:FlightIds", "f:FlightingBranchName", "f:FlightRing", "c:IsCloudDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "c:OSUILocale", "c:IsDomainJoined" ], "IRISCLIENT": [ "+IRISCLIENTBASE", "c:FlightIds" ], "IRISCLIENTBASE": [ "DeviceFamily", "OSVersion", "t:OSSkuId", "OSArchitecture", "c:TelemetryLevel", "f:FlightRing", "f:FlightingBranchName", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical", "t:IsMsftOwned", "c:ChassisType", "OEMModel", "c:OSUILocale", "c:OSEdition", "r:CurrentBranch", "t:WCOSProductId", "c:InstallationType", "r:InstallDate", "c:IsCloudDomainJoined", "c:IsDeviceRetailDemo", "f:IsRetailOS", "c:ProcessorClockSpeed", "c:ProcessorCores", "c:ProcessorManufacturer", "c:TotalPhysicalRAM", "c:D3DMaxFeatureLevel", "c:IsAlwaysOnAlwaysConnectedCapable", "t:SMode", "t:LocalUserID", "r:AndroidUserOptinValue", "c:ProcessorModel", "MX_FlightIds", "a:UpgEx_CO21H2", "r:KnownFoldersBackupStatus", "c:OEMModelSystemFamily", "OEMName_Uncleaned", "r:IsSpotlightEnabledInOEMTheme", "r:IsSpotlightThemeEnabledByOEM", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentPromptAllowed" ], "IRISCLIENTV2": [ "+IRISCLIENTBASE", "IX_FlightIds" ], "MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [ "t:OSVersionFull", "t:IsTestLab", "f:FlightRing" ], "MITIGATION": [ "t:DeviceFamily", "f:FlightRing", "c:FlightIds", "c:IsDomainJoined", "t:IsMsftOwned", "f:IsRetailOS", "t:IsTestLab", "IsVM", "OEMModel", "c:OSEdition", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "t:SMode", "f:IsFlightingEnabled", "c:FirmwareVersion", "c:TelemetryLevel", "f:FlightingBranchName", "r:CurrentBranch", "OSVersion", "w:FirstStorageSpaceDeviceId", "r:IsCldFltSyncRoots", "c:OSInstallType", "v:IsNotepadExePresent", "r:StrictHiveSecurityReg", "a:GatedBlockId_21H1", "r:UpdateOfferedDays", "r:UsoScanMitigation", "r:GamingServicesInstalledKey", "v:FileExistsMscoreeDll", "w:NetFx3State", "r:WCFHTTPActivationNotificationState", "w:WCFHTTPActivationState", "r:WCFNonHTTPActivationNotificationState", "w:WCFNonHTTPActivationState", "r:DotNetMissingComponentsTroubleshooterSuccess", "r:IIS_ASPNET", "w:IIS_ASPNET_WMI", "r:IIS_NetFxExtensibility", "w:IIS_NetFxExtensibility_WMI", "r:WAS_NetFxEnvironment", "w:WAS_NetFxEnvironment_WMI", "v:XamlCbsActivationStore", "v:XamlCbsActivationStoreArm64", "v:OnnxruntimeVer", "w:ElanFingerprintDriverVersion", "r:AADBrokerPluginNotRegistered", "r:TenantId", "r:IppPrinterBadDefaultPdc", "r:FlightingOptOutState", "r:CloudFilesFilter", "r:PSAKyoceraMissingDEH", "r:PSATATriumphMissingDEH", "r:PSAXeroxMissingDEH", "w:PSAKyoceraInstalledName", "w:PSATATriumphInstalledName", "w:XeroxPsaInstalledName" ], "MLMOD": [ "ChassisTypeId", "t:DeviceFamily", "f:FlightingBranchName", "f:FlightRing", "f:IsRetailOS", "t:OSSkuId", "t:OSVersionFull", "c:OSUILocale", "OSVersion", "c:TelemetryLevel", "r:CurrentBranch", "t:IsTestLab", "c:PrimaryDiskType", "FX_FlightIds" ], "MTP": [ "+_WU_OS_CORE" ], "MUSE": [ "+_WU_FB", "ChassisTypeId", "deviceClass", "deviceId", "c:FlightIds", "locale", "ms", "os", "osVer", "ring", "sampleId", "sku", "r:DaysSince19H1FUOffer", "u:DisableDualScan", "u:UpdateServiceUrl", "c:CommercialId", "f:FlightingBranchName", "c:SystemVolumeTotalCapacity", "c:IsAlwaysOnAlwaysConnectedCapable", "c:ProcessorCores", "c:PrimaryDiskType", "c:TotalPhysicalRAM", "c:ProcessorClockSpeed", "c:ProcessorIdentifier", "c:ProcessorModel", "c:ActivationChannel", "c:IsCloudDomainJoined", "c:isCommercial", "c:IsDomainJoined", "c:IsMDMEnrolled", "c:SCCMClientID", "r:OEMSubModel", "c:OEMModelNumber", "c:OEMManufacturerName", "r:OobeSeeker", "r:DefaultUserRegion" ], "NARRATORNNV": [ "+WU_STORE" ], "NOISYHAMMER": [ "+WU_OS" ], "PHS": [ "r:GridZoneName", "OEMModel", "c:OEMManufacturerName", "c:OSUILocale", "r:OEMSubModel", "DeviceFamily" ], "RULESENGINE": [ "c:OSEdition", "t:OSSkuId", "c:OSUILocale", "a:UpgEx_CO21H2", "a:GStatus_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:TimestampEpochString_CO21H2", "r:AndroidUserOptinValue", "f:FlightingBranchName", "f:FlightRing", "r:CurrentBranch", "c:ProcessorModel", "r:NPUEnabledDevice", "MX_FlightIds", "r:KnownFoldersBackupStatus", "c:IsDomainJoined", "r:WindowsAccountSyncConsentApplicable", "r:WindowsAccountSyncConsentState", "r:WindowsAccountSyncConsentPromptAllowed" ], "RUXIM": [ "c:ActivationChannel", "f:FlightRing", "r:InstallDate", "f:IsFlightingEnabled", "a:ISVM", "OEMModel", "OSArchitecture", "t:OSSkuId", "c:SCCMClientID", "r:SetupDisplayedEulaVersion", "r:KioskMode", "r:OobeSeeker", "r:UninstallActive", "c:OEMManufacturerName", "r:OEMSubModel" ], "SEDIMENTPACK": [ "+WU_OS" ], "SERVICEEXPERIENCES": [ "f:FlightingBranchName", "f:FlightRing", "s:MaxShellVersion", "s:MinShellVersion", "t:IsTestLab", "c:TelemetryLevel", "t:OSSkuId", "r:CurrentBranch", "OSVersion", "DeviceFamily", "r:WSX_Windows_Settings_Account", "c:FlightIds", "r:WSX_Runtime", "r:WSX_Windows_Shell_Start", "r:WSX_Windows_AppSample" ], "SERVICING_CBS": [ "+WU", "osVer" ], "SETUP360": [ "t:OSSkuId", "f:FlightRing" ], "SMARTOPTOUT": [ "+CDM" ], "STORAGEGROVELER": [ "a:Free", "c:TelemetryLevel", "f:FlightRing", "f:IsFlightingEnabled", "IsVM", "t:OSVersionFull" ], "UTC": [ "+UTC_STATIC", "osVer", "locale", "ring", "f:PilotRing", "f:IsRetailOS", "ms", "expId", "t:SMode", "f:FlightingBranchName", "c:CommercialId", "r:IsFeedbackHubSelfhost", "c:AzureVMType", "t:IsTestLab", "c:TelemetryLevel", "c:IsVirtualDevice", "r:IsProcessorMode", "r:UtcDataHandlingPolicies" ], "UTC_STATIC": [ "os", "deviceId", "sampleId", "deviceClass", "sku", "OEMModel", "OEMName_Uncleaned", "c:PrimaryDiskType", "c:ProcessorModel", "c:TotalPhysicalRAM" ], "UUS": [ "OSVersion", "f:FlightRing", "t:IsTestLab", "t:OSVersionFull", "f:FlightingBranchName", "r:CurrentBranch", "f:IsFlightingEnabled" ], "WAASASSESSMENT": [ "+WU_OS" ], "WAASMEDIC": [ "os", "osVer", "ring", "deviceClass", "deviceId", "locale", "sku", "c:ActivationChannel", "c:CommercialId", "r:CurrentBranch", "f:FlightingBranchName", "c:IsCloudDomainJoined", "c:IsDomainJoined", "t:IsTestLab", "OSVersion", "c:SCCMClientID", "c:TelemetryLevel", "r:FlightingOptOutState" ], "WOSC": [ "t:DeviceFamily", "f:FlightRing", "f:IsFlightingEnabled", "t:IsMsftOwned", "t:LocalDeviceID", "t:OSSkuId", "c:OSUILocale", "t:OSVersionFull", "c:TelemetryLevel", "r:IsHybridOrXGpu", "r:PlayFabPartyRelay", "OSVersion" ], "WPSHIFT": [ "+MTP" ], "WU": [ "+WU_OS", "r:DUInternal" ], "_WU_AV": [ "r:AvastReg", "r:AvastBlackScreen", "v:AvastVer", "r:AvgReg", "v:AvgVer", "r:EsetReg", "v:EsetVer", "r:KasperskyReg", "v:KasperskyVer", "v:SymantecVer", "r:TencentReg", "r:TencentType", "r:AhnlabInstalledKey", "r:AvastInstalledKey", "r:AVGInstalledKey", "r:AviraInstalledKey", "r:BullguardInstalledKey", "r:ESETInstalledKey", "r:ESTSecurityInstalledKey", "r:FSecureInstalledKey", "v:GDataInstalledVer", "r:K7InstalledKey", "r:KasperskyInstalledKey", "r:KingsoftInstalledKey", "r:LenovoInstalledKey", "r:MalwarebytesInstalledKey", "r:McAfeeInstalledKey", "r:PandaInstalledKey", "r:QuickhealInstalledKey1", "r:SophosInstalledKey1", "r:SymantecInstalledKey", "r:TencentInstalledKey", "r:ThreatTrackInstalledKey", "r:TrendInstalledKey", "r:WebrootInstalledKey", "v:K7InstalledVer" ], "_WU_COMMON": [ "r:CurrentBranch", "r:DefaultUserRegion", "DeviceFamily", "r:DriverPartnerRing", "r:FlightContent", "f:FlightingBranchName", "f:FlightRing", "HoloLens", "c:InstallationType", "c:InstallLanguage", "f:IsFlightingEnabled", "r:IsFlightingEnabled", "c:MobileOperatorCommercialized", "OEMModel", "OEMName_Uncleaned", "r:OemPartnerRing", "OSArchitecture", "OSVersion", "t:OSSkuId", "c:OSUILocale", "c:ProcessorManufacturer", "r:ReleaseType", "v:SkypeRoomSystem", "t:SMode", "c:TelemetryLevel", "r:WindowsMixedReality", "v:WuClientVer", "p:DucPublisherId", "p:DucDeviceModelId", "p:DucOemPartnerRing", "p:DucCustomPackageId", "p:DesiredOsVersion", "p:DesiredSystemManifestVersion", "r:TenantId" ], "_WU_FB": [ "u:BranchReadinessLevel", "u:DeferQualityUpdatePeriodInDays", "u:DeferFeatureUpdatePeriodInDays", "r:PausedFeatureStatus", "r:PausedQualityStatus", "u:TargetReleaseVersion", "r:QUDeadline", "r:UpdatePreference", "r:UpdateOfferedDays", "u:TargetProductVersion", "DSS_Enrolled", "r:NonSecurityUpdate" ], "WU_OS": [ "+_WU_OS_CORE", "+_WU_FB" ], "_WU_OS_CORE": [ "+_WU_COMMON", "+_WU_AV", "r:AhnLabKeyboard", "a:Bios", "r:BlockFeatureUpdates", "c:CommercialId", "a:DataVer_RS5", "r:DisconnectedStandby", "r:DchuNvidiaGrfxExists", "r:DchuNvidiaGrfxVen", "r:DchuIntelGrfxExists", "r:DchuIntelGrfxVen", "r:DchuAmdGrfxExists", "r:DchuAmdGrfxVen", "c:FirmwareVersion", "a:Free", "a:GStatus_RS3", "a:GStatus_RS4", "a:GStatus_RS5", "r:HidOverGattReg", "r:InstallDate", "c:IsDeviceRetailDemo", "c:IsPortableOperatingSystem", "IsVM", "c:OEMModelBaseBoard", "r:OobeSeeker", "r:OSRollbackBuild", "r:OSRollbackCount", "r:OSRollbackDate", "PhoneTargetingName", "r:PonchAllow", "r:PonchBlock", "c:ProcessorIdentifier", "r:RecoveredFromBuild", "r:RecoveredOnDate", "r:Steam", "v:TobiiVer", "v:TrendMicroVer", "r:UninstallActive", "l:UpdateManagementGroup", "a:UpgEx_RS3", "a:UpgEx_RS4", "a:UpgEx_RS5", "a:Version_RS5", "r:DisableWUfBOfferBlock", "a:UpgEx_19H1", "a:SdbVer_19H1", "a:GStatus_19H1", "a:GStatus_19H1Setup", "a:TimestampEpochString_19H1Setup", "a:GenTelRunTimestamp_19H1", "a:DataExpDateEpoch_19H1", "u:EnableWUfBUpgradeGates", "r:GStatusBlockIDs_All", "TimestampDelta_19H1Subtract19H1Setup", "DataExpDateDelta_19H1Subtract19H1Setup", "a:DataExpDateEpoch_19H1Setup", "a:TimestampEpochString_19H1", "r:IsContainerMgrInstalled", "r:IsWDAGEnabled", "r:MTPTargetingInfo", "r:EKB19H2InstallCount", "r:EKB19H2UnInstallCount", "r:EKB19H2InstallTimeEpoch", "r:EKB19H2UnInstallTimeEpoch", "r:BlockEdgeWithChromiumUpdate", "r:IsWDATPEnabled", "r:IsAutopilotRegistered", "r:EdgeWithChromiumInstallVersion", "r:EdgeWithChromiumInstallFailureCount", "r:IsEdgeWithChromiumInstalled", "r:KioskMode", "c:IsCloudDomainJoined", "c:IsDomainJoined", "a:DataExpDateEpoch_20H1", "a:DataExpDateEpoch_20H1Setup", "a:GStatus_20H1", "a:GStatus_20H1Setup", "a:SdbVer_20H1", "a:TimestampEpochString_20H1", "a:TimestampEpochString_20H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup", "TimestampDelta_20H1Subtract20H1Setup", "a:UpgEx_20H1", "r:AutopilotUpdateInProgress", "r:UHSEnrolled", "r:HotPatchEKBInstalled", "r:LCUVer", "c:isCommercial", "c:ActivationChannel", "c:IsMDMEnrolled", "c:SCCMClientID", "r:ChinaTypeApproval_CTA", "p:DesiredOcpVersion", "r:UpgradeEligible", "r:AllowInPlaceUpgrade", "r:SH_SIPolicyCleanup", "r:FeatureUpdateDeadline", "a:DataExpDateEpoch_21H1", "a:UpgEx_CO21H2", "a:GStatus_21H1", "DataExpDateDelta_21H1Subtract20H1Setup", "TimestampDelta_21H1Subtract20H1Setup", "a:TimestampEpochString_21H1", "r:OEMSubModel", "c:ProcessorModel", "c:TPMVersion", "r:StayOnWindows10Timestamp", "a:GStatus_CO21H2Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup", "a:TimestampEpochString_CO21H2Setup", "a:DataExpDateEpoch_CO21H2Setup", "a:TimestampEpochString_CO21H2", "a:DataExpDateEpoch_CO21H2", "a:GStatus_CO21H2", "p:SetPolicyDrivenUpdateSourceForFeatureUpdates", "r:DchuNvidiaGrfxVenTest", "a:DataExpDateDelta_21H2Subtract20H1Setup", "a:TimestampEpochString_21H2", "a:TimestampDelta_21H2Subtract20H1Setup", "a:GStatus_21H2", "a:DataExpDateEpoch_21H2", "r:DSS_Enrolled_DF", "r:UpgradeAccepted", "r:SetupDisplayedEulaVersion", "c:ProcessorCores", "c:ProcessorClockSpeed", "c:TotalPhysicalRAM", "c:SecureBootCapable", "c:PrimaryDiskTotalCapacity", "r:BitDefenderInstalledKey", "r:BroadcomInstalledKey", "v:CrowdStrikeInstalledVer", "r:QihooInstalledKey", "r:Win11UpgradeAcceptedTimestamp", "a:UpgEx_NI22H2", "r:OobeNdupAcceptedTarget", "r:OobeNdupFU22621CommitChoice", "a:DataExpDateEpoch_NI22H2", "a:GStatus_NI22H2", "a:GStatus_NI22H2Setup", "a:TimestampEpochString_NI22H2Setup", "TimestampDelta_NI22H2SubtractNI22H2Setup", "DataExpDateDelta_NI22H2SubtractNI22H2Setup", "a:DataExpDateEpoch_NI22H2Setup", "a:TimestampEpochString_NI22H2", "r:IsVbsEnabled", "r:FODRetryPending", "r:UserInPlaceUpgrade", "v:HidparseDriversVer", "v:HidparseSystem32Ver", "v:HidparseSystem32Ver1", "r:CIOptin", "r:FlightingOptOutState", "p:WSUSconfigured_csp", "a:UpgEx_NI22H2Setup", "a:UpgEx_CO21H2Setup", "u:WUfBClientManaged", "u:UpdateServiceUrl", "u:AllowOptionalContent", "FX_FlightIds", "DL_OSVersion", "r:ExpPkgs", "r:UUSVersion" ], "_WU_PTI": [ "c:FrontFacingCameraResolution", "c:RearFacingCameraResolution", "c:TotalPhysicalRAM", "c:NFCProximity", "c:Magnetometer", "c:Gyroscope", "c:D3DMaxFeatureLevel", "c:InternalPrimaryDisplayResolutionHorizontal", "c:InternalPrimaryDisplayResolutionVetical" ], "WU_STORE": [ "+_WU_COMMON", "r:AppChannels", "r:AppRMIDs", "u:BranchReadinessLevel" ] }, "Required": [ "App", "AppVer", "AttrDataVer" ], "Aliases": { "AccountFirstChar": "c:MSA_Accounts", "ChassisTypeId": "c:ChassisType", "DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup", "DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup", "DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup", "DataExpDateDelta_NI22H2SubtractNI22H2Setup": "a:DataExpDateEpoch_NI22H2_Subtract_DataExpDateEpoch_NI22H2Setup", "deviceClass": "DeviceFamily", "deviceId": "t:LocalDeviceID", "DeviceId": "t:LocalDeviceID", "DL_OSVersion2": "DL_OSVersion", "DSS_Enrolled": "r:DSS_Enrolled_State", "expId": "c:FlightIds", "FlightRing": "f:FlightRing", "FX_FlightIds": "c:FlightIds", "IsVM": "a:ISVM", "IX_FlightIds": "c:FlightIds", "locale": "c:OSUILocale", "ms": "t:IsMsftOwned", "MX_FlightIds": "c:FlightIds", "OEMModel": "c:OEMModelNumber", "OEMName_Uncleaned": "c:OEMManufacturerName", "osVer": "t:OSVersionFull", "OSVersionFull": "t:OSVersionFull", "PhoneTargetingName": "c:OEMModelName", "ring": "f:FlightRing", "sampleId": "t:PopVal", "sku": "t:OSSkuId", "TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup", "TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup", "TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup", "TimestampDelta_NI22H2SubtractNI22H2Setup": "a:TimestampEpochString_NI22H2_Subtract_TimestampEpochString_NI22H2Setup" }, "Fallback": { "r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey", "r:AvastBlackScreen": "r:AvgBlackScreen", "r:AvastInstalledKey": "r:AvastInstalledWowKey", "r:AVGInstalledKey": "r:AVGInstalledWowKey", "r:AviraInstalledKey": "r:AviraInstalledWowKey", "a:Bios": "a:Bios_RS3", "a:Bios_RS3": "a:Bios_RS4", "a:Bios_RS4": "a:Bios_RS5", "r:BlockFeatureUpdates": "r:BlockWUUpgrades", "r:BlockWUUpgrades": "r:BlockWUUpgradesWow", "r:BuildFID": "r:BuildFID_WCOS", "r:BuildFID_WCOS": "r:BuildFID_WCOS2", "r:BullguardInstalledKey": "v:BullguardInstalledVer", "a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb", "r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2", "r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending", "r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists", "r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2", "r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending", "r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2", "r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending", "DL_OSVersion": "OSVersion", "r:DriverPartnerRing": "r:OSDataDriverPartnerRing", "r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow", "r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow", "u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5", "r:ESETInstalledKey": "r:ESETInstalledWowKey", "r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey", "f:FlightingBranchName": "c:FlightingBranchName", "a:Free": "a:Free_RS3", "a:Free_RS3": "a:Free_RS4", "a:Free_RS4": "a:Free_RS5", "r:FSecureInstalledKey": "r:FSecureInstalledWowKey", "a:GatedFeature_NI22H2": "r:Migrated_GatedFeature_NI22H2Setup", "a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb", "HoloLens": "r:WindowsMixedReality", "r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow", "a:ISVM": "a:ISVM_RS3", "a:ISVM_RS3": "a:ISVM_RS4", "a:ISVM_RS4": "a:ISVM_RS5", "r:K7InstalledKey": "r:K7InstalledWowKey", "r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey", "r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey", "r:LenovoInstalledKey": "r:LenovoInstalledWowKey", "r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey", "r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey", "r:Migrated_GatedFeature_NI22H2Setup": "r:Migrated_GatedFeature_NI22H2", "c:OEMModelBaseBoard": "r:OEMModelBaseBoard", "r:PandaInstalledKey": "r:PandaInstalledWowKey", "r:PandaInstalledWowKey": "v:PandaInstalledVer", "r:PonchAllow": "r:PonchAllowKey", "r:PonchAllowKey": "r:PonchAllowWow", "r:PonchAllowWow": "r:PonchAllowWowKey", "r:QUDeadline": "r:QUDeadlineMDM", "r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2", "r:SophosInstalledKey1": "r:SophosInstalledKey2", "r:SymantecInstalledKey": "r:SymantecInstalledWowKey", "v:SymantecVer": "v:SymantecVer64", "u:TargetReleaseVersion": "r:TargetReleaseVersionGP", "r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM", "r:TencentInstalledKey": "r:TencentInstalledWowKey", "r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey", "a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb", "v:TobiiVer": "v:TobiiVerx86", "v:TobiiVerx86": "v:TobiiVer1x86", "r:TrendInstalledKey": "r:TrendInstalledWowKey", "r:TrendInstalledWowKey": "v:TrendInstalledVer", "a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb", "r:UpgradeAccepted": "r:Win11UpgradeAcceptedWUSeeker", "r:WebExperience": "r:WebExperienceWow", "r:WebrootInstalledKey": "r:WebrootInstalledWowKey" }, "Transform": { "AccountFirstChar": { "SubLength": 1 }, "DeviceInfoGatherSuccessful": { "Ignore": [ "0" ] }, "FlightingOptOutState": { "Ignore": [ "0" ] }, "FX_FlightIds": { "Regex": "FX:[^,]*", "RegexDelimiter": "," }, "IppPrinterBadDefaultPdc": { "Contains": "V4_No_ChangeID_Present" }, "IsDomainJoined": { "Ignore": [ "0" ] }, "IsHybridOrXGpu": { "Ignore": [ "0" ] }, "IsMsftOwned": { "Ignore": [ "0" ] }, "IsPortableOperatingSystem": { "Ignore": [ "0" ] }, "IsTestLab": { "Ignore": [ "0" ] }, "IsVM": { "Ignore": [ "0" ] }, "IX_FlightIds": { "Regex": "IX:[^,]*", "RegexDelimiter": "," }, "MX_FlightIds": { "Regex": "ME:[^,]*|MD:[^,]*", "RegexDelimiter": "," }, "OEMModel": { "SubLength": 100 }, "OEMName_Uncleaned": { "SubLength": 100 }, "PausedFeatureStatus": { "Ignore": [ "0" ] }, "PausedQualityStatus": { "Ignore": [ "0" ] }, "PSAKyoceraInstalledName": { "Contains": "A97ECD55.KYOCERAPrintCenter" }, "PSATATriumphInstalledName": { "Contains": "TATriumph-AdlerGmbH.TAUTAXPrintCenter" }, "SMode": { "Ignore": [ "0" ] }, "StayOnWindows10Timestamp": { "SubLength": -3, "Ignore": [ "" ] }, "XeroxPsaInstalledName": { "Contains": "XeroxCorp.PrintExperience" } }, "Registry": { "AADBrokerPluginNotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsMitigationData\\AADBrokerPluginNotRegistered", "IfExists": true }, "ActiveHoursEnd": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursEnd", "RegValueType": "REG_DWORD" }, "ActiveHoursStart": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "ActiveHoursStart", "RegValueType": "REG_DWORD" }, "AhnlabInstalledKey": { "FullPath": "SOFTWARE\\Ahnlab", "IfExists": true }, "AhnlabInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab", "IfExists": true }, "AhnLabKeyboard": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt", "ValueName": "NbTpMsExist" }, "AllowInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "AllowInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "AllowUpgradesWithUnsupportedTPMOrCPU": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU", "RegValueType": "REG_DWORD" }, "AndroidUserOptinValue": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility\\", "ValueName": "OptedIn", "RegValueType": "REG_DWORD" }, "AppChannels": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ChannelId", "EncodingType": "Json" }, "AppRMIDs": { "FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*", "ValueName": "ReleaseManagementId", "EncodingType": "Json" }, "AutopilotUpdateInProgress": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate", "ValueName": "AutopilotUpdateInProgress", "RegValueType": "REG_DWORD" }, "AvastBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "Win10-1803" }, "AvastInstalledKey": { "FullPath": "SOFTWARE\\Avast Software\\Avast", "IfExists": true }, "AvastInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast", "IfExists": true }, "AvastReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters", "ValueName": "QualityCompat" }, "AvgBlackScreen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "Win10-1803" }, "AVGInstalledKey": { "FullPath": "SOFTWARE\\AVG\\Antivirus", "IfExists": true }, "AVGInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus", "IfExists": true }, "AvgReg": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters", "ValueName": "QualityCompat" }, "AviraInstalledKey": { "FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "AviraInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus", "IfExists": true }, "BitDefenderInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}", "IfExists": true }, "BlockEdgeWithChromiumUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "DoNotUpdateToEdgeWithChromium", "RegValueType": "REG_DWORD" }, "BlockFeatureUpdates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade", "ValueName": "BlockFeatureUpdates", "RegValueType": "REG_DWORD" }, "BlockWUUpgrades": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BlockWUUpgradesWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile", "ValueName": "BlockWUUpgrades", "RegValueType": "REG_DWORD" }, "BroadcomInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection", "IfExists": true }, "BuildFID": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BuildFID_WCOS2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build", "ValueName": "EsdFlightData", "RegValueType": "REG_SZ" }, "BullguardInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard", "IfExists": true }, "ChinaTypeApproval_CTA": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess", "ValueName": "ActivePolicyCode", "RegValueType": "REG_SZ" }, "CIOptin": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "IsContinuousInnovationOptedIn", "RegValueType": "REG_DWORD" }, "CloudFilesFilter": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\CldFlt\\Instances\\", "ValueName": "DefaultInstance", "RegValueType": "REG_SZ" }, "CurrentBranch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "BuildBranch", "RegValueType": "REG_SZ" }, "DataExpDateEpoch_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "DataExpDateEpoch", "RegValueType": "REG_SZ" }, "DaysSince19H1FUOffer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin", "ValueName": "DaysSinceLastOffer", "RegValueType": "REG_QWORD" }, "DchuAmdGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DriverDelete" }, "DchuAmdGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "IfExists": true }, "DchuAmdGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag", "ValueName": "DCHUVen" }, "DchuAmdGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters", "ValueName": "DCHUVen" }, "DchuIntelGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DriverDelete" }, "DchuIntelGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "IfExists": true }, "DchuIntelGrfxNExists": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn", "IfExists": true }, "DchuIntelGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx", "ValueName": "DCHUVen" }, "DchuIntelGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxDeletePending": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DriverDelete" }, "DchuNvidiaGrfxExists": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "IfExists": true }, "DchuNvidiaGrfxVen": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVen2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters", "ValueName": "DCHUVen" }, "DchuNvidiaGrfxVenTest": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm", "ValueName": "DCHUVenTest", "RegValueType": "REG_DWORD" }, "DefaultUserRegion": { "HKey": "HKEY_USERS", "FullPath": ".DEFAULT\\Control Panel\\International\\Geo", "ValueName": "Nation", "RegValueType": "REG_SZ" }, "DeviceInfoGatherSuccessful": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing", "ValueName": "DeviceInfoGatherSuccessful", "RegValueType": "REG_DWORD" }, "DisableWUfBOfferBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "DisableWUfBOfferBlock", "RegValueType": "REG_DWORD" }, "DisconnectedStandby": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power", "ValueName": "EnforceDisconnectedStandby", "RegValueType": "REG_DWORD" }, "DotNetMissingComponentsTroubleshooterSuccess": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\.NETFramework", "ValueName": "DotNetMissingComponentsTroubleshooterSuccess", "RegValueType": "REG_DWORD" }, "DriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "DSS_Enrolled_DF": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate", "ValueName": "WUfBDF", "RegValueType": "REG_DWORD" }, "DSS_Enrolled_State": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WufbDS", "ValueName": "enrollmenttype", "RegValueType": "REG_SZ" }, "DUInternal": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\MoSetup", "ValueName": "DynamicUpdateInternalTest", "RegValueType": "REG_DWORD" }, "EdgeWithChromiumInstallFailureCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallFailureCountWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateAttempts" }, "EdgeWithChromiumInstallVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EdgeWithChromiumInstallVersionWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate", "ValueName": "WindowsUpdateVersion" }, "EKB19H2InstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Count" }, "EKB19H2InstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2", "ValueName": "Timestamp" }, "EKB19H2UnInstallCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Count" }, "EKB19H2UnInstallTimeEpoch": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0", "ValueName": "Timestamp" }, "EnableWUfBUpgradeGatesRS5": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0", "ValueName": "DataRequireGatedScanForFeatureUpdates", "RegValueType": "REG_DWORD" }, "ESETInstalledKey": { "FullPath": "SOFTWARE\\ESET\\ESET Security", "IfExists": true }, "ESETInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security", "IfExists": true }, "EsetReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters", "ValueName": "WindowsCompatibilityLevel", "RegValueType": "REG_DWORD" }, "ESTSecurityInstalledKey": { "FullPath": "SOFTWARE\\ESTsoft", "IfExists": true }, "ESTSecurityInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft", "IfExists": true }, "ExpPkgs": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "ExpPkgs", "RegValueType": "REG_SZ" }, "ExpStates": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\FIDs", "ValueName": "PreviewConfigs", "RegValueType": "REG_SZ" }, "FeatureUpdateDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\", "ValueName": "ConfigureDeadlineForFeatureUpdates", "RegValueType": "REG_DWORD" }, "FlightContent": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "ContentType", "RegValueType": "REG_SZ" }, "FlightingOptOutState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\UI\\Selection", "ValueName": "OptOutState", "RegValueType": "REG_DWORD" }, "FODRetryPending": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing", "ValueName": "FODRetry", "RegValueType": "REG_DWORD" }, "FSecureInstalledKey": { "FullPath": "SOFTWARE\\F-Secure\\OneClient", "IfExists": true }, "FSecureInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient", "IfExists": true }, "FSRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability", "ValueName": "FSRing", "RegValueType": "REG_SZ" }, "GamingServicesInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices", "IfExists": true }, "GridZoneName": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\COAWOS", "ValueName": "GridZoneName", "RegValueType": "REG_SZ", "PersistedSourceId": "COAWOSRoot" }, "GStatus_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "GStatus", "RegValueType": "REG_SZ" }, "GStatusBlockIDs_All": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX", "ValueName": "SdbEntries", "RegValueType": "REG_SZ" }, "HidOverGattReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll", "ValueName": "Source", "RegValueType": "REG_SZ" }, "HotPatchEKBInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64", "IfExists": true }, "IIS_ASPNET": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-ASPNET", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "IIS_NetFxExtensibility": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\IIS-NetFxExtensibility", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "InstallDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "InstallDate", "RegValueType": "REG_DWORD" }, "IntelPlatformId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", "ValueName": "Platform Specific Field 1", "RegValueType": "REG_DWORD" }, "IppPrinterBadDefaultPdc": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\*\\PrinterDriverData", "ValueName": "V4_PDC_ChangeID", "RegValueType": "REG_SZ", "EncodingType": "Json" }, "IsAutopilotRegistered": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache", "ValueName": "ProfileAvailable", "RegValueType": "REG_DWORD" }, "IsFlightingEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability", "ValueName": "IsBuildFlightingEnabled", "RegValueType": "REG_DWORD" }, "IsCHCapableBuild": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}", "IfExists": true }, "IsCldFltSyncRoots": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*", "IfExists": true }, "IsConfigMgrEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState", "ValueName": "ConfigMgrEnabled", "RegValueType": "REG_DWORD" }, "IsContainerMgrInstalled": { "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService", "IfExists": true }, "IsEdgeWithChromiumInstalled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsEdgeWithChromiumInstalledWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "IsFeedbackHubSelfhost": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost", "IfExists": true }, "IsHybridOrXGpu": { "FullPath": "SOFTWARE\\Microsoft\\DirectX", "ValueName": "HybridDeviceApplicableForDxDbGpuPreferences" }, "IsProcessorMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\RegionalSettings", "ValueName": "IsProcessorMode", "RegValueType": "REG_QWORD" }, "IsSpotlightEnabledInOEMTheme": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes", "ValueName": "WindowsSpotlight", "RegValueType": "REG_DWORD" }, "IsSpotlightThemeEnabledByOEM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\DesktopOptimization", "ValueName": "WindowsSpotlightTheme", "RegValueType": "REG_DWORD" }, "IsVbsEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\ControlSet001\\Control\\DeviceGuard", "ValueName": "EnableVirtualizationBasedSecurity", "RegValueType": "REG_DWORD" }, "IsWDAGEnabled": { "FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics", "IfExists": true }, "IsWDATPEnabled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status", "ValueName": "OnboardingState" }, "K7InstalledKey": { "FullPath": "SOFTWARE\\K7 Computing", "IfExists": true }, "K7InstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing", "IfExists": true }, "KasperskyInstalledKey": { "FullPath": "SOFTWARE\\KasperskyLab", "IfExists": true }, "KasperskyInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab", "IfExists": true }, "KasperskyReg": { "FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters", "ValueName": "UseVtHardware" }, "KingsoftInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KingsoftInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security", "IfExists": true }, "KioskMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount", "ValueName": "ConfigSource", "RegValueType": "REG_DWORD" }, "KnownFoldersBackupStatus": { "HKey": "HKEY_CURRENT_USER", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StorageProviderStatus", "ValueName": "OneDrive", "RegValueType": "REG_SZ" }, "LCUVer": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "LCUVer" }, "LenovoInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "LenovoInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1", "IfExists": true }, "MalwarebytesInstalledKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "MalwarebytesInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1", "IfExists": true }, "McAfeeInstalledKey": { "FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "McAfeeInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams", "IfExists": true }, "Migrated_GatedFeature_NI22H2": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\MigratedMarkers\\TargetVersionUpgradeExperienceIndicators\\NI22H2", "ValueName": "GatedFeatureSingleString", "RegValueType": "REG_SZ" }, "Migrated_GatedFeature_NI22H2Setup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\MigratedMarkers\\TargetVersionUpgradeExperienceIndicators\\NI22H2Setup", "ValueName": "GatedFeatureSingleString", "RegValueType": "REG_SZ" }, "MTPTargetingInfo": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\MTPTargetingInfo", "ValueName": "TargetRing" }, "NonSecurityUpdate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "NonSecurityRelease", "RegValueType": "REG_DWORD" }, "NPUEnabledDevice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows Media Foundation\\FrameServer\\WindowsCameraEffects", "ValueName": "EffectsCameraAvailable", "RegValueType": "REG_DWORD" }, "OEMMode": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Office\\16.0\\Common\\OEM", "ValueName": "OOBEMode", "RegValueType": "REG_SZ" }, "OEMModelBaseBoard": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "BaseBoardProduct", "RegValueType": "REG_SZ" }, "OemPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OEMSubModel": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS", "ValueName": "SystemSKU", "RegValueType": "REG_SZ" }, "OobeNdupAcceptedTarget": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\NDUP\\Updates", "ValueName": "Target", "RegValueType": "REG_SZ" }, "OobeNdupFU22621CommitChoice": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\NDUP\\Updates\\FeatureUpdate_22621", "ValueName": "CommitChoice", "RegValueType": "REG_DWORD" }, "OobeSeeker": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates", "ValueName": "OOBEUpdateStarted" }, "OSDataDriverPartnerRing": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner", "ValueName": "TargetRing", "RegValueType": "REG_SZ" }, "OSRollbackBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "BuildString", "RegValueType": "REG_SZ" }, "OSRollbackCount": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "Count", "RegValueType": "REG_DWORD" }, "OSRollbackDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "PandaInstalledKey": { "FullPath": "SOFTWARE\\Panda Software\\Setup", "IfExists": true }, "PandaInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup", "IfExists": true }, "PausedFeatureStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedFeatureStatus" }, "PausedQualityStatus": { "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings", "ValueName": "PausedQualityStatus" }, "PlayFabPartyRelay": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay", "IfExists": true }, "PonchAllow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc", "RegValueType": "REG_DWORD" }, "PonchAllowKey": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchAllowWow": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc" }, "PonchAllowWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc", "IfExists": true }, "PonchBlock": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat", "ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9", "RegValueType": "REG_DWORD" }, "PreviewBuildsManagerEnabled": { "FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager", "ValueName": "ArePreviewBuildsAllowed" }, "PSAKyoceraMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\A97ECD55.KYOCERAPrintCenter_4.1.11108.0_x64__kqmhh0ktdt7dg", "IfExists": true }, "PSATATriumphMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\TATriumph-AdlerGmbH.TAUTAXPrintCenter_4.1.11108.0_x64__h5e8vsnevp54y", "IfExists": true }, "PSAXeroxMissingDEH": { "HKey": "HKEY_CLASSES_ROOT", "FullPath": "Extensions\\ContractId\\Windows.PrintSupportExtension\\PackageId\\XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8", "IfExists": true }, "QihooInstalledKey": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity", "IfExists": true }, "QUDeadline": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QUDeadlineMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "ConfigureDeadlineForQualityUpdates", "RegValueType": "REG_DWORD" }, "QuickhealInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt", "IfExists": true }, "QuickhealInstalledKey2": { "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe", "IfExists": true }, "RecoveredFromBuild": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "LastBuild", "RegValueType": "REG_DWORD" }, "RecoveredOnDate": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom", "ValueName": "DateStamp", "RegValueType": "REG_DWORD" }, "ReleaseType": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo", "ValueName": "ReleaseType", "RegValueType": "REG_SZ" }, "SetupDisplayedEulaVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\", "ValueName": "SetupDisplayedEulaVersion", "RegValueType": "REG_DWORD" }, "SH_SIPolicyCleanup": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings", "ValueName": "SIPolicyCleanup", "RegValueType": "REG_DWORD" }, "SmartActiveHoursState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SmartActiveHoursState", "RegValueType": "REG_DWORD" }, "SophosInstalledKey1": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService", "IfExists": true }, "SophosInstalledKey2": { "FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc", "IfExists": true }, "StayOnWindows10Timestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferDeclined", "RegValueType": "REG_QWORD" }, "Steam": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Classes\\Steam", "ValueName": "", "RegValueType": "REG_SZ" }, "StrictHiveSecurityReg": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*", "ValueName": "StrictHiveSecuritySet" }, "SymantecInstalledKey": { "FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "SymantecInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}", "IfExists": true }, "TargetReleaseVersionGP": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "TargetReleaseVersionInfo", "RegValueType": "REG_SZ" }, "TargetReleaseVersionMDM": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update", "ValueName": "TargetReleaseVersion", "RegValueType": "REG_SZ" }, "TenantId": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SYSTEM\\CurrentControlSet\\Control\\CloudDomainJoin\\JoinInfo\\*", "ValueName": "TenantId" }, "TencentInstalledKey": { "FullPath": "SOFTWARE\\Tencent\\QQPCMgr", "IfExists": true }, "TencentInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr", "IfExists": true }, "TencentReg": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "LoadStartTime" }, "TencentType": { "FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe", "ValueName": "Type" }, "TestRN": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Wosc\\Client\\Persistent\\ClientState\\FCON", "ValueName": "TestRing" }, "ThreatTrackInstalledKey": { "FullPath": "SOFTWARE\\SBAMSvc", "IfExists": true }, "ThreatTrackInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc", "IfExists": true }, "TimestampEpochString_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "TimestampEpochString", "RegValueType": "REG_SZ" }, "TrendInstalledKey": { "FullPath": "SOFTWARE\\TrendMicro", "IfExists": true }, "TrendInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro", "IfExists": true }, "UHSEnrolled": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", "ValueName": "UHSEnrolled", "RegValueType": "REG_SZ", "IfExists": true }, "UninstallActive": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "System\\Setup", "ValueName": "UninstallActive", "RegValueType": "REG_DWORD" }, "UpdateOfferedDays": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\", "ValueName": "UpToDateDays", "RegValueType": "REG_DWORD" }, "UpdatePreference": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate", "ValueName": "UpdatePreference", "RegValueType": "REG_DWORD" }, "UpgEx_CO21H2RegFb": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2", "ValueName": "UpgEx", "RegValueType": "REG_SZ" }, "UpgradeAccepted": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\", "ValueName": "UpgradeAccepted", "RegValueType": "REG_DWORD", "IfExists": true }, "UpgradeEligible": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UpgradeEligible", "RegValueType": "REG_DWORD" }, "UserInPlaceUpgrade": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion", "ValueName": "UserInPlaceUpgrade", "RegValueType": "REG_DWORD" }, "UsoScanMitigation": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\", "ValueName": "UsoScanNotStartingMitigationCompleted", "RegValueType": "REG_DWORD", "IfExists": true }, "UtcDataHandlingPolicies": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack", "ValueName": "UtcDataHandlingPolicies", "RegValueType": "REG_QWORD" }, "UUSVersion": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator", "ValueName": "LastRunVersion", "RegValueType": "REG_SZ" }, "WAS_NetFxEnvironment": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\Notifications\\OptionalFeatures\\WAS-NetFxEnvironment", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-HTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WCFNonHTTPActivationNotificationState": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Component Based Servicing\\\\Notifications\\\\OptionalFeatures\\\\WCF-NonHTTP-Activation", "ValueName": "Selection", "RegValueType": "REG_DWORD" }, "WebExperience": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebExperienceWow": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}", "IfExists": true }, "WebrootInstalledKey": { "FullPath": "SOFTWARE\\WRData", "IfExists": true }, "WebrootInstalledWowKey": { "FullPath": "SOFTWARE\\WOW6432Node\\WRData", "IfExists": true }, "Win11UpgradeAcceptedTimestamp": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD" }, "Win11UpgradeAcceptedWUSeeker": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings", "ValueName": "SvOfferAccepted", "RegValueType": "REG_QWORD", "IfExists": true }, "WindowsAccountSyncConsentApplicable": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT", "ValueName": "isApplicable", "RegValueType": "REG_DWORD" }, "WindowsAccountSyncConsentPromptAllowed": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT", "ValueName": "isSystemInitiatedPromptAllowed", "RegValueType": "REG_DWORD" }, "WindowsAccountSyncConsentState": { "HKey": "HKEY_CURRENT_USER", "FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\UnifiedConsent\\DEFAULTACCOUNT\\WINDOWSACCOUNTSYNCCONSENT\\DATASHARING", "ValueName": "isConsentAccepted", "RegValueType": "REG_DWORD" }, "WindowsMixedReality": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors", "ValueName": "WdfMajorVersion", "RegValueType": "REG_DWORD" }, "WSX_Runtime": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "ExperienceExtensions", "RegValueType": "REG_SZ" }, "WSX_Windows_AppSample": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.AppSample", "RegValueType": "REG_SZ" }, "WSX_Windows_Settings_Account": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Settings.Account", "RegValueType": "REG_SZ" }, "WSX_Windows_Shell_Start": { "HKey": "HKEY_LOCAL_MACHINE", "FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC", "ValueName": "Windows.Shell.StartMenu", "RegValueType": "REG_SZ" } }, "FileInfo": { "AvastVer": { "Path": "\\system32\\Drivers\\aswVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "AvgVer": { "Path": "\\system32\\Drivers\\avgVmm.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "BullguardInstalledVer": { "Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVer": { "Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CortanaAppVerTest": { "Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "CrowdStrikeInstalledVer": { "Path": "drivers\\CrowdStrike\\CSAgent.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "EsetVer": { "Path": "\\drivers\\ehdrv.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "FileExistsMscoreeDll": { "Path": "%windir%\\\\system32\\\\mscoree.dll", "IfExists": true }, "GDataInstalledVer": { "Path": "\\drivers\\MiniIcpt.sys", "IfExists": true, "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "HidparseDriversVer": { "Path": "%windir%\\system32\\drivers\\hidparse.sys" }, "HidparseSystem32Ver": { "Path": "%windir%\\system32" }, "HidparseSystem32Ver1": { "Path": "%windir%\\system32\\hidparse.sys" }, "IsNotepadExePresent": { "Path": "%windir%\\system32\\notepad.exe", "IfExists": true }, "K7InstalledVer": { "Path": "\\K7 Computing", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "KasperskyVer": { "Path": "\\system32\\Drivers\\klhk.sys", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "OnnxruntimeVer": { "Path": "%windir%\\\\system32\\\\onnxruntime.dll" }, "PandaInstalledVer": { "Path": "\\Panda Security", "IfExists": true, "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "SkypeRoomSystem": { "Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml", "IfExists": true }, "SymantecVer": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "SymantecVer64": { "Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys", "FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}" }, "TobiiVer": { "Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TobiiVer1x86": { "Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TobiiVerx86": { "Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe", "FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}" }, "TrendInstalledVer": { "Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll", "IfExists": true, "FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}" }, "TrendMicroVer": { "Path": "\\drivers\\TMUMH.sys", "FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}" }, "WuClientVer": { "Path": "\\system32\\wuaueng.dll", "FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}" }, "XamlCbsActivationStore": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_x64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true }, "XamlCbsActivationStoreArm64": { "Path": "%ProgramData%\\\\Microsoft\\\\Windows\\\\AppRepository\\\\Packages\\\\Microsoft.UI.Xaml.CBS_8.2205.4001.0_arm64__8wekyb3d8bbwe\\\\ActivationStore.dat", "IfExists": true } }, "Licensing": { "UpdateManagementGroup": { "Name": "UpdatePolicy-UpdateManagementGroup" } }, "UpdatePolicy": { "AllowOptionalContent": { "PolicyEnum": 58, "Enterprise": true }, "BranchReadinessLevel": { "PolicyEnum": 5, "Enterprise": true }, "BranchReadinessLevelSource": { "PolicyEnum": 5, "Enterprise": true, "UseSource": true }, "DeferFeatureUpdatePeriodInDays": { "PolicyEnum": 9, "Enterprise": true }, "DeferQualityUpdatePeriodInDays": { "PolicyEnum": 7, "Enterprise": true }, "DisableDualScan": { "PolicyEnum": 42, "Enterprise": true }, "EnableWUfBUpgradeGates": { "PolicyEnum": 51, "Enterprise": true }, "TargetProductVersion": { "PolicyEnum": 53, "Enterprise": true }, "TargetReleaseVersion": { "PolicyEnum": 50, "Enterprise": true }, "UpdateServiceUrl": { "PolicyEnum": 12 }, "WUfBClientManaged": { "PolicyEnum": 32, "Enterprise": true } }, "Policy": { "DesiredOcpVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/" }, "DesiredOsVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion" }, "DesiredSystemManifestVersion": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion" }, "DucCustomPackageId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId" }, "DucDeviceModelId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId" }, "DucOemPartnerRing": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing" }, "DucPublisherId": { "LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId" }, "SetPolicyDrivenUpdateSourceForFeatureUpdates": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates" }, "WSUSconfigured_csp": { "LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/UpdateServiceUrl" } }, "AppInfo": { "WidgetsAppVer": { "Name": "MicrosoftWindows.Client.WebExperience" } }, "WMI": { "ElanFingerprintDriverVersion": { "Query": "SELECT DriverVersion, Manufacturer FROM Win32_PnPSignedDriver WHERE Manufacturer = 'ELAN'", "Name": "DriverVersion", "Timeout": 2000 }, "FirstStorageSpaceDeviceId": { "Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'", "Name": "DeviceID", "Timeout": 2000 }, "IIS_ASPNET_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-ASPNET'", "Name": "InstallState", "Timeout": 2000 }, "IIS_NetFxExtensibility_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'IIS-NetFxExtensibility'", "Name": "InstallState", "Timeout": 2000 }, "NetFx3State": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'NetFX3'", "Name": "InstallState", "Timeout": 2000 }, "PSAKyoceraInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'A97ECD55.KYOCERAPrintCenter_4.1.11108.0_x64__kqmhh0ktdt7dg'", "Name": "Name", "Timeout": 2000 }, "PSATATriumphInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'TATriumph-AdlerGmbH.TAUTAXPrintCenter_4.1.11108.0_x64__h5e8vsnevp54y'", "Name": "Name", "Timeout": 2000 }, "WAS_NetFxEnvironment_WMI": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WAS-NetFxEnvironment'", "Name": "InstallState", "Timeout": 2000 }, "WCFHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-HTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "WCFNonHTTPActivationState": { "Query": "SELECT * FROM Win32_OptionalFeature WHERE name = 'WCF-NonHTTP-Activation'", "Name": "InstallState", "Timeout": 2000 }, "XeroxPsaInstalledName": { "Query": "SELECT Name, ProgramId FROM Win32_InstalledStoreProgram WHERE ProgramId = 'XeroxCorp.PrintExperience_8.29.32.0_x64__f7egpvdyrs2a8'", "Name": "Name", "Timeout": 2000 } } }" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.firefox.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.firefox.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.chrome.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.chrome.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee\SharedPackages\McProxy64] "Path"="C:\Program Files\Common Files\McAfee\McProxy\McProxy64.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\MFW_WebBoost] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local mfw_dir = install_dir .. [[\MFW]] package = { header = { id = "MFW_WebBoost", version = "4.1.1.836", name = "MFW_WebBoost" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[packages\\*]], mfw_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebBoost]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[packages\\*]], mfw_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebBoost]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebBoost]], flags = { REG64 = true } } } } } } }, } --12C2726E01AB3EE357089DA0D30D9D106A96207D63AA75D2085F36C4CD605BFCA221E18D2A8EFC48DF9525C66096BC9D3F71CFDFCEFCE7A00DF68068E56CAC0E++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WATaskManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WATaskManager", version = "4.1.1.836", name = "WATaskManager" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^WATaskManager.dll$]], install_dir}, {[[^MicrosoftEdgeWebview2Setup.exe$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\WATaskManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\WATaskManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^WATaskManager.dll$]], install_dir, flags = { RenameCopy = true }}, {[[^MicrosoftEdgeWebview2Setup.exe$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\WATaskManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\WATaskManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\WATaskManager]], flags = { REG64 = true } } } } } } }, } --796D1DB5DB86CA417981765188C34FF86D9B72B66F37AAA198EE7A61E4FC56E1B805BE0EF649F20E5CCCABA78125AA4570612719B45C8FD5E5E05764496FAB99++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local msc_protcat_reg_path = [[SOFTWARE\McAfee\MSC\Settings\protcat\AA747A62-493D-4082-A2EF-C4AD2049AA21\0F167695-3F7C-421c-89E8-40544CE9D1A2\installed]] local msc_msad_toc_reg_path = [[Software\McAfee\MSC\Settings\toc\A12341F7-A130-4447-97AD-2675F46516FB]] local legacy_wa_reg_path = [[Software\McAfee\SiteAdvisor]] local legacy_wa_files_path = [[%FOLDERID_ProgramFilesX86%McAfee\SiteAdvisor]] local legacy_wa_data_path = [[%FOLDERID_ProgramData%McAfee\SiteAdvisor]] package = { header = { id = "WebAdvisor", version = "4.1.1.836", name = "WebAdvisor Root Package" }, dependencies = { { "WebAdvisor_BrowserHost", "*" }, { "WebAdvisor_BrowserPlugin", "*" }, { "WebAdvisor_DownloadScan", "*" }, { "WebAdvisor_EventManager", "*" }, { "WebAdvisor_L10N", "*" }, { "WebAdvisor_LogicModule", "*" }, { "WebAdvisor_LogicScripts", "*" }, { "WebAdvisor_LookupManager", "*" }, { "WebAdvisor_MFW", "*" }, { "MFW_WebBoost", "*" }, { "WebAdvisor_MFW_NPS", "*" }, { "WebAdvisor_MFW_WA", "*" }, { "WebAdvisor_ResourceDll", "*" }, { "WebAdvisor_ServiceHost", "*" }, { "WebAdvisor_SettingManager", "*" }, { "WebAdvisor_TaskManager", "*" }, { "WebAdvisor_Telemetry", "*" }, { "WebAdvisor_UIHost", "*" }, { "WebAdvisor_UIManager", "*" }, { "WebAdvisor_Uninstaller", "*" }, { "WebAdvisor_Updater", "*" }, { "WATaskManager", "*" }, { "WebAdvisor_WSSDep", "*" }, { "WebAdvisor_AnalyticsManager", "*" }, { "WebAdvisor_AnalyticsTelemetry", "*" }, }, install = { commands = { { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor]], { valuename = "Install Dir", type = "REG_SZ", value = install_dir, flags = { REG64 = true } }, { valuename = "FullVersion", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, }, } } }, -- Clean up old siteadvisor key { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = legacy_wa_reg_path, flags = { REG32 = true, DeleteEmptyParents = true } }, } } }, -- Clean up old siteadvisor dir/files (ex. oem.txt in mcafee\siteadvisor by partner build, 407 sabsi.exe logs) { command = "DeletePath", paths = { legacy_wa_files_path, legacy_wa_data_path }, DeleteEmptyParents = true }, } }, update = { commands = { { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor]], { valuename = "FullVersion", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, -- Clean up old siteadvisor key { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = legacy_wa_reg_path, flags = { REG32 = true, DeleteEmptyParents = true } }, } } }, -- Clean up old siteadvisor dir/files (ex. oem.txt in mcafee\siteadvisor by partner build, 407 sabsi.exe logs) { command = "DeletePath", paths = { legacy_wa_files_path, legacy_wa_data_path }, DeleteEmptyParents = true }, } }, uninstall = { commands = { -- Note that these msc values are created by MSCInfoWriter in taskmanager { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = msc_protcat_reg_path, flags = { REG64 = true, DeleteEmptyParents = true } }, { subkey = msc_msad_toc_reg_path, flags = { REG64 = true, DeleteEmptyParents = true } }, } } }, -- Clean up old siteadvisor key { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = legacy_wa_reg_path, flags = { REG32 = true, DeleteEmptyParents = true } }, } } }, -- Clean up old siteadvisor dir/files (ex. oem.txt in mcafee\siteadvisor by partner build, 407 sabsi.exe logs) { command = "DeletePath", paths = { legacy_wa_files_path, legacy_wa_data_path }, DeleteEmptyParents = true }, } }, } --A1CE6387E5DFB80DBA31BF9A061DD1062728264299EC321946DA2AF677E18C64A499ED4BB5CDA83A671C68FFABB590CD199E1259DCC97CF24039B28C140BA0DE++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_AnalyticsManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_AnalyticsManager", version = "4.1.1.836", name = "WebAdvisor Analytics Manager" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^AnalyticsManager.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\AnalyticsManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\AnalyticsManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } } } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^AnalyticsManager.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\AnalyticsManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\AnalyticsManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } } } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\AnalyticsManager]], flags = { REG64 = true } } } } } } }, } --20A35FE644B89CB637667ADB6026D9F9857D56D2C25E1F317DF4B4F68196913CCAD22400F138322F80D5DB54A07EE900677C4343F1811CCD15CC54D493C4239F++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_AnalyticsTelemetry] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local telemetry_dir = install_dir .. [[\analyticstelemetry]] package = { header = { id = "WebAdvisor_AnalyticsTelemetry", version = "4.1.1.836", name = "WebAdvisor Analytics Telemetry" }, dependencies = { { "WebAdvisor_AnalyticsManager", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[events\\*]], telemetry_dir}, {[[context\\*]], telemetry_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\AnalyticsTelemetry]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[events\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[context\\*]], telemetry_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\AnalyticsTelemetry]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\AnalyticsTelemetry]], flags = { REG64 = true } } } } } } }, } --B2B1D0558CA0CAEAD7B3205619075385623B2B61924FB29C5CC4CB9FDE4BBC31AE81E662EEFFF4694EEC835CB86F4459DBE43CCC1040E08DE72A3F035D6DA803++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_BrowserHost] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_BrowserHost", version = "4.1.1.836", name = "WebAdvisor Browser Host" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^BrowserHost.exe$]], install_dir}, {[[^webadvisor.*.mcafee.chrome.extension.json$]], install_dir}, {[[^webadvisor.*.mcafee.firefox.extension.json$]], install_dir}, {[[^edge.com.mcafee.webadvisor.*.json$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\BrowserHost]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.chrome.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.chrome.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.firefox.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.firefox.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.chrome.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.chrome.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.firefox.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.firefox.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor_v2.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor_v2.json]], flags = { REG64 = true } }, }, } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^BrowserHost.exe$]], install_dir, flags = { RenameCopy = true } }, {[[^webadvisor.*.mcafee.chrome.extension.json$]], install_dir, flags = { RenameCopy = true } }, {[[^webadvisor.*.mcafee.firefox.extension.json$]], install_dir, flags = { RenameCopy = true } }, {[[^edge.com.mcafee.webadvisor.*.json$]], install_dir, flags = { RenameCopy = true } }, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\BrowserHost]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.chrome.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.chrome.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.firefox.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor.mcafee.firefox.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.chrome.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.chrome.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.firefox.extension.json]], flags = { REG64 = true } }, }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\webadvisor_v2.mcafee.firefox.extension.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor_v2.json]], flags = { REG32 = true } }, }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension]], { valuename = "", type = "REG_SZ", value = install_dir .. [[\edge.com.mcafee.webadvisor_v2.json]], flags = { REG64 = true } }, }, } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\BrowserHost]], flags = { REG64 = true } }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG64 = true } }, { subkey = [[SOFTWARE\Google\Chrome\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG32 = true } }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG64 = true } }, { subkey = [[SOFTWARE\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG32 = true } }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG32 = true } }, { subkey = [[SOFTWARE\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension]], flags = { REG64 = true } }, } } } } }, } --3413F3980E1B1158FD531399D1C21F87950E4DBBA3E6CFD155A3FA12A7E8A9221234987B82DBD2E49D3A8E94B6C025B2D4B4530A259AFEB370E75C52AED58531++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_BrowserPlugin] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_BrowserPlugin", version = "4.1.1.836", name = "WebAdvisor Browser Plugin" }, dependencies = { { "WebAdvisor_BrowserHost", "*" }, { "WebAdvisor_DownloadScan", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^e10ssaffplg.xpi$]], install_dir}, } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^e10ssaffplg.xpi$]], install_dir, flags = { RenameCopy = true } }, } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", -- Chrome: WebAdvisor Extension { subkey = [[SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho]], flags = { REG64 = true } }, { subkey = [[SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho]], flags = { REG32 = true } }, -- Chrome: PPS Extension { subkey = [[SOFTWARE\Google\Chrome\Extensions\mfifoblohohmjoaiclakcbicbeklikgl]], flags = { REG64 = true } }, { subkey = [[SOFTWARE\Google\Chrome\Extensions\mfifoblohohmjoaiclakcbicbeklikgl]], flags = { REG32 = true } }, { subkey = [[Software\Mozilla\Firefox\Extensions]], -- FireFox: WebAdvisor Extension { valuename = "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}", flags = { REG32 = true } }, { valuename = "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}", flags = { REG64 = true } }, -- FireFox: WebBoost Extension { valuename = "{EF0645D5-78D6-4B33-BC45-95B1874977AF}", flags = { REG32 = true } }, { valuename = "{EF0645D5-78D6-4B33-BC45-95B1874977AF}", flags = { REG64 = true } }, }, -- EDGE: WebAdvisor Extension { subkey = [[Software\Microsoft\Edge\Extensions\fdhgeoginicibhagdmblfikbgbkahibd]], flags = { REG32 = true } }, } } } } }, } --5641F6840DA7A4E172976886E3C660502578C42A4D24D2D50EA170A6E838B1BEDE4234F4352AAC2B9B4268C40B562D8182821110B00931ED444FAAA254C5F96B++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_DownloadScan] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_DownloadScan", version = "4.1.1.836", name = "WebAdvisor Download Scanner" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^win32\DownloadScan.dll$]], install_dir}, {[[^x64\DownloadScan.dll$]], install_dir}, } }, } }, post_install = { commands = { { command = "regsvr", root = install_dir, files = { [[win32\DownloadScan.dll]] } }, { command = "regsvr", root = install_dir, files = { [[x64\DownloadScan.dll]] }, conditions = { platform = 64 } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^win32\DownloadScan.dll$]], install_dir, flags = { RenameCopy = true }}, {[[^x64\DownloadScan.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "regsvr", root = install_dir, files = { [[win32\DownloadScan.dll]] } }, { command = "regsvr", root = install_dir, files = { [[x64\DownloadScan.dll]] }, conditions = { platform = 64 } }, } }, uninstall = { commands = { { command = "unregsvr", root = install_dir, files = { [[win32\DownloadScan.dll]] } }, { command = "unregsvr", root = install_dir, files = { [[x64\DownloadScan.dll]] }, conditions = { platform = 64 } }, } }, } --4DF4AD72868C756EFB380E817E5C48AFBF398FD2C9367FF72753E22BDBAA1FC0A79826C2C9D21CF653E75742E001DD6031D7874F226F83FC13D2902FF3CACB4E++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_EventManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_EventManager", version = "4.1.1.836", name = "WebAdvisor Event Manager" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^EventManager.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\EventManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\EventManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^EventManager.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\EventManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\EventManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\EventManager]], flags = { REG64 = true } } } } } } }, } --61B31986556331BF27615DFF9BB81268524444C9A27E744389A132703A7E3A606E334979A7BB3D026D0892F1F29E85483AA19840A07D94A2E032D6CC4E690B91++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_L10N] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_L10N", version = "4.1.1.836", name = "WebAdvisor L10N Files" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[jslang\\*]], install_dir}, } }, } }, update = { commands = { { command = "Extract", patterns = { {[[jslang\\*]], install_dir, flags = { RenameCopy = true }}, } }, } }, uninstall = { commands = { } }, } --D6A1889693DD2E108ECA05D6C00C90873D2AADA5F83F4F48E7F817785B4E8C720456A067BA52E887503DA94E47186763BE0D5BA28D00B247B37AD337C5E7B028++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_LogicModule] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_LogicModule", version = "4.1.1.836", name = "WebAdvisor Logic Module" }, dependencies = { { "WebAdvisor_UIHost", "*" }, { "WebAdvisor_LogicScripts", "*" }, { "WebAdvisor_MFW", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[.*%.dll]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\LogicModule]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\LogicModule.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[.*%.dll]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\LogicModule]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\LogicModule.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\LogicModule]], flags = { REG64 = true } } } } } } }, } --3A681163EBB996708AB3619F137D659778D162156765C73FA56B12B6B7976D0ED03ED76A4391D51E8A7D1B4DDDB163D3E4B92E7FD777DA27C503F864862957DE++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_LogicScripts] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local duckduckgo_provider = install_dir .. [[\logic\\providers\\duckduckgo.luc]] local onesearch_provider = install_dir .. [[\logic\\providers\\onesearch.luc]] local yandex_provider = install_dir .. [[\logic\\providers\\yandex.luc]] package = { header = { id = "WebAdvisor_LogicScripts", version = "4.1.1.836", name = "WebAdvisor Business Logic Scripts" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "DeletePath", paths = { duckduckgo_provider, onesearch_provider,yandex_provider }, DeleteEmptyParents = false }, { command = "Extract", patterns = { {[[logic\\*]], install_dir}, {[[logic\\providers\\*]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\logic]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "DeletePath", paths = { duckduckgo_provider, onesearch_provider,yandex_provider }, DeleteEmptyParents = false }, { command = "Extract", patterns = { {[[logic\\*]], install_dir, flags = { RenameCopy = true }}, {[[logic\\providers\\*]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\logic]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } } } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\logic]], flags = { REG64 = true } } } } } } }, } --0A36E9265EDA6B0C30E45F3161D075A884A9E8617432C53696B9540C08ADC07E78F14B23E6A659A0A5B4D52EE3BC30D1D138EA10347CF0F00B7D2511AA259284++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_LookupManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_LookupManager", version = "4.1.1.836", name = "WebAdvisor Lookup Manager" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^LookupManager.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\LookupManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\LookupManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^LookupManager.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\LookupManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\LookupManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\LookupManager]], flags = { REG64 = true } } } } } } }, } --EF0D8770FD94881CB4AFBB5CE6E5BE7C99E1D74536F8C19E810FCD65FB3960F13A3D324BE5DCCC4CB433F9D668F1444AFADA57E9E834D7F366AC05CBB56C3967++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_MFW] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local mfw_dir = install_dir .. [[\MFW]] package = { header = { id = "WebAdvisor_MFW", version = "4.1.1.836", name = "WebAdvisor Messaging Framework" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[core\\*]], mfw_dir}, {[[packages\\*]], mfw_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\core]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[core\\*]], mfw_dir, flags = { RenameCopy = true }}, {[[packages\\*]], mfw_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\core]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW]], flags = { REG64 = true } } } } } } }, } --FE1523B366C7B31EA6EBEFF1531775C8874E57F0C69487CAB98740E2BF3DF53D5AC485997951FEA8ABC4FEF6CB05EBF37A1CD1FF5E30E94342CFF2C0DDD738F3++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_MFW_NPS] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local mfw_dir = install_dir .. [[\MFW]] package = { header = { id = "WebAdvisor_MFW_NPS", version = "4.1.1.836", name = "WebAdvisor NPS" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[packages\\*]], mfw_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\NPS]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[packages\\*]], mfw_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\NPS]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\NPS]], flags = { REG64 = true } } } } } } }, } --6A3F47B77047D18229E1F11101C0B1E94316750CBB4E775C9FC354C9D5A8012D340F3FB02BA301070738BBB37B4AED54460BB0116CE189996DB53591299A7CA3++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_MFW_WA] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local mfw_dir = install_dir .. [[\MFW]] local checklist_handler = mfw_dir .. [[\packages\builtin\ChecklistHandler.luc]] local ss_handler = mfw_dir .. [[\packages\builtin\SecureSearchHandler.luc]] local wac_ss_res = mfw_dir .. [[\packages\builtin\WACSecureSearchL10N.luc]] package = { header = { id = "WebAdvisor_MFW_WA", version = "4.1.1.836", name = "WebAdvisor_MFW_WA" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { -- Delete duplicated Lua files in builtin folder if WA is already installed { command = "DeletePath", paths = { checklist_handler, ss_handler, wac_ss_res }, DeleteEmptyParents = false }, { command = "Extract", patterns = { {[[packages\\*]], mfw_dir}, {[[packages_web_view\\*]], mfw_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebAdvisor]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[packages\\*]], mfw_dir, flags = { RenameCopy = true }}, {[[packages_web_view\\*]], mfw_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebAdvisor]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\MFW\packages\WebAdvisor]], flags = { REG64 = true } } } } } } }, } --8DC067012306293AC66E0006A59891610FEA4ED3D1FBA18D4964579A61650747222885E068716C4DC0C7F917D541606A1C536085B8DEAD21768CC0004E3A7138++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_ResourceDll] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_ResourceDll", version = "4.1.1.836", name = "WebAdvisor Resource Dll" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^WebAdvisor.ico$]], install_dir}, {[[^Resource.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor]], { valuename = "Icon", type = "REG_SZ", value = install_dir .. [[\WebAdvisor.ico]], flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^WebAdvisor.ico$]], install_dir, flags = { RenameCopy = true}}, {[[^Resource.dll$]], install_dir, flags = { RenameCopy = true }}, } }, } }, uninstall = { commands = { } }, } --71E708C826D67EE145D3103CF10872232F3BD426D0C1A14659139DF711365E266B1098E4C2755C6CFB40A665D4C353481A510FEA647E67A4ACC712FB71D0FC6B++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_ServiceHost] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local service_name = "McAfee WebAdvisor" package = { header = { id = "WebAdvisor_ServiceHost", version = "4.1.1.836", name = "WebAdvisor Service Host" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^ServiceHost.exe$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost]], flags = { REG64 = true } } } } }, { command = "CreateService", arguments = { name = service_name, binary = [[\"]] .. install_dir .. [[\ServiceHost.exe\"]], DisplayName = service_name, start = "auto", } }, { command = "ConfigureService", arguments = { name = service_name, description = service_name .. " Service", failure = { reset = "3600", -- Reset the failure count to zero after 1 hour with no failures actions = { {"restart", 1}, -- Restart the service in 1ms after the first crash {"restart", 1000}, -- Restart the service in 1 second after the second crash {"restart", 3000}, -- Restart the service in 3 seconds after the third crash {"restart", 30 * 1000}, -- Restart the service in 30 seconds after the forth crash {"restart", 30 * 60 * 1000}, -- Do not restart the service for 30 minutes after the fifth crash {"none", "0"} -- If the service crashes more than 5 times within 1 hour, } -- let it rest in peace until the system restarts } } }, } }, post_install = { commands = { { command = "StartService", name = service_name }, } }, update = { commands = { { command = "Extract", patterns = { {[[^ServiceHost.exe$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "StartService", name = service_name, flags = { } }, } }, uninstall = { commands = { { command = "StopService", name = service_name, timeoutInMS = 10 * 1000, killOnFailure = true }, { command = "DeleteService", name = service_name }, { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost]], flags = { REG64 = true } } } } } } }, } --BB3CE2DCC6D4AE9DDA7ECA50EE4586958BC7A1F5EC293104B9F3053FA1461AED3D1459C4633BA95EEF9B0AE0C07FAED2EC85899A895337B2F3670C9D8306A7A5++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_SettingManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_SettingManager", version = "4.1.1.836", name = "WebAdvisor Root Package" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^SettingManager.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\SettingManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\SettingManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "Order", type = "REG_DWORD", value = "255", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^SettingManager.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\SettingManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\SettingManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "Order", type = "REG_DWORD", value = "255", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\SettingManager]], flags = { REG64 = true } } } } } } }, } --01DC14242F00BC6094BE0FDC751935D0146C9E2FD86556B6FB21F1F917DA138A21BB3B76036DA033C643F14586457B84B7B3DEF049F58C24FF90376F8FFCC45F++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_TaskManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local dat_file = install_dir .. [[\config.dat]] local mc_scan32 = install_dir .. [[\mcscan32.dll]] local mc_scan64 = install_dir .. [[\mscan64a.dll]] package = { header = { id = "WebAdvisor_TaskManager", version = "4.1.1.836", name = "WebAdvisor Task Manager" }, dependencies = { { "WebAdvisor_ServiceHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "DeletePath", paths = {dat_file, mc_scan32 }, DeleteEmptyParents = false, conditions = { platform = 32 } }, { command = "DeletePath", paths = {dat_file, mc_scan64 }, DeleteEmptyParents = false, conditions = { platform = 64 } }, { command = "Extract", patterns = { {[[.*%.dll$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\TaskManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\TaskManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "DeletePath", paths = {dat_file, mc_scan32 }, DeleteEmptyParents = false, conditions = { platform = 32 } }, { command = "DeletePath", paths = {dat_file, mc_scan64 }, DeleteEmptyParents = false, conditions = { platform = 64 } }, { command = "Extract", patterns = { {[[.*%.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\TaskManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\TaskManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\ServiceHost\TaskManager]], flags = { REG64 = true } } } } } } }, } --EE45DB80C1A4E86F85F8057FB4BEDC504D279FF9053BFC6AF9FC61F49D7F549C64BDD9FD3D2737378DB1B088C834F8954442AA8639F9005BC1C3F26F4F6A8486++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_Telemetry] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local telemetry_dir = install_dir .. [[\telemetry]] package = { header = { id = "WebAdvisor_Telemetry", version = "4.1.1.836", name = "WebAdvisor Telemetry" }, dependencies = { { "WebAdvisor_EventManager", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[events\\*]], telemetry_dir}, {[[events\\handlers\\*]], telemetry_dir}, {[[events\\formatters\\*]], telemetry_dir}, {[[events\\transmitters\\*]], telemetry_dir}, {[[dimensions\\*]], telemetry_dir}, {[[dimensions\\handlers\\*]], telemetry_dir}, {[[serializers\\*]], telemetry_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\Telemetry]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[events\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[events\\handlers\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[events\\formatters\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[events\\transmitters\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[dimensions\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[dimensions\\handlers\\*]], telemetry_dir, flags = { RenameCopy = true }}, {[[serializers\\*]], telemetry_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\Telemetry]], { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\Telemetry]], flags = { REG64 = true } } } } } } }, } --F44A6AD01AA4D84DEC9F592A445188992226AA224685183D2E9C4F18B018B2068E4E2E0B6CF09807E9ACED20E8832610524F865A1541108C92BBFE5CA77D2BA1++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_UIHost] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_UIHost", version = "4.1.1.836", name = "WebAdvisor UI Host" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^UIHost.exe$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost]], flags = { REG64 = true } } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^UIHost.exe$]], install_dir, flags = { RenameCopy = true }}, } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost]], flags = { REG64 = true } } } } } } }, } --F49A7AE4FB69085F5B36F06CD758CF542F4BB3470F47B4008029ECD9BBBE788ED511428C272F00312857538C9FCBEBC9472D56874600E8B3405DABCB4D23C2E7++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_UIManager] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_UIManager", version = "4.1.1.836", name = "WebAdvisor UI Manager" }, dependencies = { { "WebAdvisor_MFW", "*" }, { "WebAdvisor_MFW_WA", "*" }, { "WebAdvisor_MFW_NPS", "*" }, { "MFW_WebBoost", "*" }, { "WebAdvisor_LogicScripts", "*" }, { "WebAdvisor_UIHost", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[.*%.dll]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\UIManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\UIManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, update = { commands = { { command = "Extract", patterns = { {[[.*%.dll]], install_dir, flags = { RenameCopy = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\UIManager]], { valuename = "Path", type = "REG_SZ", value = install_dir .. [[\UIManager.dll]], flags = { REG64 = true } }, { valuename = "Version", type = "REG_SZ", value = "4.1.1.836", flags = { REG64 = true } }, { valuename = "UnloadTimeout", type = "REG_DWORD", value = "30000", flags = { REG64 = true } }, } } } }, } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = [[SOFTWARE\McAfee\WebAdvisor\UIHost\UIManager]], flags = { REG64 = true } } } } } } }, } --091683EEC011BA729A54D7F8D7BE15C7AB76ABD5A192630D093761EA2691F415BA24E1CE2C6E731C01C5CC093298CA6AA0AE96FA8E9512D70F8B1125D688264C++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_Uninstaller] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] local uninstall_reg_path = [[SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}]] package = { header = { id = "WebAdvisor_Uninstaller", version = "4.1.1.836", name = "WebAdvisor Uninstaller" }, dependencies = { { "WebAdvisor_ResourceDll", "*" }, { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^Uninstaller.exe$]], install_dir}, {[[.*%.html$]], install_dir}, {[[.*%.js$]], install_dir}, {[[.*%.css$]], install_dir}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = uninstall_reg_path, { valuename = "DisplayIcon", type = "REG_SZ", value = install_dir .. [[\MFW\packages\builtin\msac.ico]], flags = { REG32 = true } }, { valuename = "DisplayName", type = "REG_SZ", value = "WebAdvisor by McAfee", flags = { REG32 = true } }, { valuename = "DisplayVersion", type = "REG_SZ", value = "4.1.1.836", flags = { REG32 = true } }, { valuename = "Publisher", type = "REG_SZ", value = "McAfee, LLC", flags = { REG32 = true } }, { valuename = "UninstallString", type = "REG_SZ", value = install_dir .. [[\Uninstaller.exe]], flags = { REG32 = true } }, { valuename = "InstallLocation", type = "REG_SZ", value = install_dir, flags = { REG32 = true } }, { valuename = "URLInfoAbout", type = "REG_SZ", value = "https://www.siteadvisor.com", flags = { REG32 = true } }, { valuename = "VersionMajor", type = "REG_SZ", value = "4", flags = { REG32 = true } }, { valuename = "VersionMinor", type = "REG_SZ", value = "1", flags = { REG32 = true } }, } } } } } }, update = { commands = { -- IgnoreCopyOnReboot -> do a rename copy even during a core update -> the new uninstaller will be used by the user even -- before system reboot. Otherwise the old uninstaller may not be compatible with the new manifests. { command = "Extract", patterns = { {[[^Uninstaller.exe$]], install_dir, flags = { RenameCopy = true, IgnoreCopyOnReboot = true }}, {[[.*%.html$]], install_dir, flags = { RenameCopy = true, IgnoreCopyOnReboot = true }}, {[[.*%.js$]], install_dir, flags = { RenameCopy = true, IgnoreCopyOnReboot = true }}, {[[.*%.css$]], install_dir, flags = { RenameCopy = true, IgnoreCopyOnReboot = true }}, } }, { command = "SetRegistry", entries = { { key = "HKLM", { subkey = uninstall_reg_path, { valuename = "DisplayIcon", type = "REG_SZ", value = install_dir .. [[\MFW\packages\builtin\msac.ico]], flags = { REG32 = true } }, { valuename = "DisplayVersion", type = "REG_SZ", value = "4.1.1.836", flags = { REG32 = true } }, { valuename = "Publisher", type = "REG_SZ", value = "McAfee, LLC", flags = { REG32 = true } }, { valuename = "UninstallString", type = "REG_SZ", value = install_dir .. [[\Uninstaller.exe]], flags = { REG32 = true } }, { valuename = "InstallLocation", type = "REG_SZ", value = install_dir, flags = { REG32 = true } }, { valuename = "URLInfoAbout", type = "REG_SZ", value = "https://www.siteadvisor.com", flags = { REG32 = true } }, { valuename = "VersionMajor", type = "REG_SZ", value = "4", flags = { REG32 = true } }, { valuename = "VersionMinor", type = "REG_SZ", value = "1", flags = { REG32 = true } }, } } } } } }, uninstall = { commands = { { command = "DeleteRegistry", entries = { { key = "HKLM", { subkey = uninstall_reg_path, flags = { REG32 = true } } } } } } }, } --FF6CD9152A50BDEC409E7E19A189DCDA9AA3CBFA3114B4D7CC06A7C8634D4F20658DD452175AE378C0D4ED706EC16ADA5562F8B998D93A6ED9038CA48AF65313++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_Updater] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_Updater", version = "4.1.1.836", name = "WebAdvisor Updater" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^Updater.exe$]], install_dir}, } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^Updater.exe$]], install_dir, flags = { RenameCopy = true }}, } }, } }, uninstall = { commands = { } }, } --761FDC0CE24A1EDAFCB16B1578B1A8130700A3A4CED7DCD58AFB4C514EDE2C6F8013278B4EDA6C20E97290FDDDC2256C94054831E81E34AF4273547AB6B1B982++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\WebAdvisor_WSSDep] "manifest"="local install_dir = [[%FOLDERID_ProgramFiles%McAfee\WebAdvisor]] package = { header = { id = "WebAdvisor_WSSDep", version = "4.1.1.836", name = "WebAdvisor WSS Dependencies" }, dependencies = { { meta="SD", path = { install_dir }, version = "*", }, }, install = { commands = { { command = "Extract", patterns = { {[[^win32\WSSDep.dll$]], install_dir}, {[[^x64\WSSDep.dll$]], install_dir}, } }, { command = "regsvr", root = install_dir, files = { [[win32\WSSDep.dll]] } }, { command = "regsvr", root = install_dir, files = { [[x64\WSSDep.dll]] }, conditions = { platform = 64 } }, } }, update = { commands = { { command = "Extract", patterns = { {[[^win32\WSSDep.dll$]], install_dir, flags = { RenameCopy = true }}, {[[^x64\WSSDep.dll$]], install_dir, flags = { RenameCopy = true }}, } }, { command = "regsvr", root = install_dir, files = { [[win32\WSSDep.dll]] } }, { command = "regsvr", root = install_dir, files = { [[x64\WSSDep.dll]] }, conditions = { platform = 64 } }, } }, uninstall = { commands = { { command = "unregsvr", root = install_dir, files = { [[win32\WSSDep.dll]] } }, { command = "unregsvr", root = install_dir, files = { [[x64\WSSDep.dll]] }, conditions = { platform = 64 } }, } }, } --EE3F8D15BCB96DC2B017433BAA7928D95121225A87D6C90801085F7789EE418B6F9B4A54A13676D64A3D833A3996D2EDF11756227C256264E27B616EFA2282DF++" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\{SD: C:|Program Files|McAfee|WebAdvisor}] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\McAfee NGI\packages\{SD: C:|Program Files|McAfee|WebAdvisor}] "manifest"="package={ header={ id=[[{SD: C:|Program Files|McAfee|WebAdvisor}]], version=[[*]], name=[[C:\Program Files\McAfee\WebAdvisor]] }, path=[[C:\Program Files\McAfee\WebAdvisor]], dependencies={ }, properties=[[SD@type=base;]], install={commands = {}}, update ={commands = {}}, uninstall={commands={ {command="DeletePath", paths={[[C:\Program Files\McAfee\WebAdvisor]]}}, }, }, }" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Edge\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\edge.com.mcafee.webadvisor_v2.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}] "DisplayIcon"="C:\Program Files\McAfee\WebAdvisor\MFW\packages\builtin\msac.ico" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}] "DisplayName"="WebAdvisor par McAfee" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}] "Publisher"="McAfee, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}] "UninstallString"="C:\Program Files\McAfee\WebAdvisor\Uninstaller.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}] "InstallLocation"="C:\Program Files\McAfee\WebAdvisor" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\siteadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor.mcafee.firefox.extension.json" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Mozilla\NativeMessagingHosts\webadvisor.mcafee.chrome.extension] ""="C:\Program Files\McAfee\WebAdvisor\webadvisor_v2.mcafee.firefox.extension.json" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\cfwids] "DisplayName"="McAfee Inc. cfwids" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] "ServiceName"="McAfee WebAdvisor" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] "Path"=""C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] "Path.Org"=""C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] "Path.Win32"="C:\Program Files\McAfee\WebAdvisor\servicehost.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAfee WebAdvisor] "DisplayName"="McAfee WebAdvisor" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAPExe] "Path"=""C:\Program Files\Common Files\McAfee\VSCore_22_12\McApExe.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAPExe] "Path.Org"=""C:\Program Files\Common Files\McAfee\VSCore_22_12\McApExe.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAPExe] "Path.Win32"="C:\Program Files\Common Files\McAfee\VSCore_22_12\mcapexe.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAPExe] "DisplayName"="McAfee AP Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAWFwk] "Path"=""C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAWFwk] "Path.Org"=""C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAWFwk] "Path.Win32"="C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\McAWFwk] "DisplayName"="McAfee Activation Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mccspsvc] "Path"=""C:\Program Files\Common Files\McAfee\CSP\5.5.107.0\\McCSPServiceHost.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mccspsvc] "Path.Org"=""C:\Program Files\Common Files\McAfee\CSP\5.5.107.0\\McCSPServiceHost.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mccspsvc] "Path.Win32"="C:\Program Files\Common Files\McAfee\CSP\5.5.107.0\McCSPServiceHost.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mccspsvc] "DisplayName"="McAfee CSP Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfeaack] "DisplayName"="McAfee Inc. mfeaack" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfeavfk] "DisplayName"="McAfee Inc. mfeavfk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfeelamk] "DisplayName"="McAfee Inc. mfeelamk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfefire] "Path"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfefire] "Path.Org"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfefire] "Path.Win32"="C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfefire] "DisplayName"="McAfee Firewall Core Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfefirek] "DisplayName"="McAfee Inc. mfefirek" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfehidk] "DisplayName"="McAfee Inc. mfehidk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfemms] "Path"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfemms] "Path.Org"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfemms] "Path.Win32"="C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfemms] "DisplayName"="McAfee Service Controller" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfencbdc] "DisplayName"="McAfee LLC. mfencbdc" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfencrk] "DisplayName"="McAfee LLC. mfencrk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfeplk] "DisplayName"="McAfee Inc. mfeplk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfevtp] "Path"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfevtp] "Path.Org"=""C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfevtp] "Path.Win32"="C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfevtp] "DisplayName"="McAfee Validation Trust Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\mfewfpk] "DisplayName"="McAfee Inc. mfewfpk" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ModuleCoreService] "Path"=""C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ModuleCoreService] "Path.Org"=""C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ModuleCoreService] "Path.Win32"="C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ModuleCoreService] "DisplayName"="McAfee Module Core Service" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\PEFService] "Path"=""C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\PEFService] "Path.Org"=""C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\PEFService] "Path.Win32"="C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe" [HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\PEFService] "DisplayName"="McAfee PEF Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-1182664788-3244000607-1293811409-1003] "\Device\HarddiskVolume3\Program Files\McAfee\WebAdvisor\uihost.exe"="0x963B3C70FAEED90100000000000000000000000002000000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfee WebAdvisor] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfee WebAdvisor] "DisplayName"="McAfee WebAdvisor" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfee WebAdvisor] "Description"="McAfee WebAdvisor Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McAfee WebAdvisor] "ImagePath"=""C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Control Panel\NotifyIconSettings\13669129456375914057] "ExecutablePath"="{6D809377-6AF0-444B-8957-A3773F02200E}\Common Files\McAfee\Platform\McUICnt.exe" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Control Panel\NotifyIconSettings\13669129456375914057] "Publisher"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\McAfee] [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Internet Explorer\DOMStorage\mcafee.com] [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Internet Explorer\DOMStorage\messages.mcafee.com] [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched] "{6D809377-6AF0-444B-8957-A3773F02200E}\McAfee\WebAdvisor\uihost.exe"="1" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\McAfee.McAgent] [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows\CurrentVersion\PushNotifications\Backup\McAfee.McAgent] [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData] "McAfee.McAgent"="133400185059327446" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe"="0x534143500100000000000000070000002800000020B90B0060510C0001000000000000000000000A00210000A4583D09D261D80100000000000000000200000028000000000000000000000000000000200000000000000000000000A0020000000000000200000002000000" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\Program Files\McAfee\MSC\mcuihost.exe"="0x5341435001000000000000000700000028000000F8EE15001DF9150003000000000000000000000A00210000A4583D09D261D8010000000000000000020000002800000000000000000000000000000000000000000000000000000097850400000000000100000001000000" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\uihost.exe.FriendlyAppName"="McAfee WebAdvisor(user level process)" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\WebAdvisor\uihost.exe.ApplicationCompany"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nsu32C2.tmp\McClnUI.exe.FriendlyAppName"="McAfee CleanUp Tool" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nsu32C2.tmp\McClnUI.exe.ApplicationCompany"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nshD0D7.tmp\McClnUI.exe.FriendlyAppName"="McAfee CleanUp Tool" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nshD0D7.tmp\McClnUI.exe.ApplicationCompany"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nseBABA.tmp\McClnUI.exe.FriendlyAppName"="McAfee CleanUp Tool" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nseBABA.tmp\McClnUI.exe.ApplicationCompany"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\MSC\MfeBrowserHost.exe.FriendlyAppName"="McAfee WSS Shared Browser Host" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Program Files\McAfee\MSC\MfeBrowserHost.exe.ApplicationCompany"="McAfee, LLC" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nsxAC3F.tmp\McClnUI.exe.FriendlyAppName"="McAfee CleanUp Tool" [HKEY_USERS\S-1-5-21-1182664788-3244000607-1293811409-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\Adélaïde\AppData\Local\Temp\nsxAC3F.tmp\McClnUI.exe.ApplicationCompany"="McAfee, LLC" ====== Fin de Chercher ======