Farbar Recovery Scan Tool (x64) Version: 27-12-2021
Exécuté par Christine (30-12-2021 18:04:59)
Exécuté depuis D:\Mes Données\Desktop
Mode d'amorçage: Normal

================== Chercher Fichiers: "SearchAll: norton;symantec" =============

Fichier:
========
C:\Windows\System32\Tasks_Migrated\Norton WSC Integration
[2020-08-05 09:34][2020-08-05 09:34] 000003376 _____ () 01BB5ED3FA4B42A09B538A43AC730FAA [Fichier non signé]

C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Autofix
[2020-11-05 17:41][2021-02-27 19:02] 000003146 _____ () 23FD4F7D960C9068DCDEE33656CD2F4E [Fichier non signé]

C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Error Analyzer
[2020-11-05 17:41][2020-11-05 17:41] 000003100 _____ () DDD4013AFF06CA784CC2DF99A423E3CB [Fichier non signé]

C:\Windows\System32\Tasks_Migrated\Norton 360\Norton 360 Error Processor
[2020-11-05 17:41][2020-11-05 17:41] 000003812 _____ () 55C5EC6EF469CDD976216547768006B9 [Fichier non signé]

C:\Windows\Prefetch\NORTONSECURITY.EXE-5AD635E4.pf
[2021-12-21 15:32][2021-12-24 10:59] 000053334 _____ () 0048F378B80FCA4BA80C15C5178E696B [Fichier non signé]

C:\ProgramData\Microsoft\Windows\AppRepository\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp.xml
[2021-12-26 19:17][2021-12-26 19:17] 000003331 _____ () CD627A47ED3982F1F5ECACBE08AB8290 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\c0106e66-f0c0-47b6-be89-93827ff6bd68\Message\nortonOnDark.png
[2021-11-25 09:22][2021-12-10 10:42] 000010816 _____ () 048D122328F3246303D449D6686819DA [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\b9f0b120-29ef-41c1-9a2a-88e7578f5fd0\Message\nortonOnDark.png
[2021-09-11 08:42][2021-09-16 10:43] 000010816 _____ () 8BA9A8708B287C5768064D238EE8777B [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\a3eaf261-8a2e-4b37-91c6-7c6515af3cd7\Message\nortonOnDark.png
[2021-09-24 09:20][2021-09-28 11:18] 000010816 _____ () DAB71B4026D5E85EB8731D669ECC835F [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\7e1b6b66-2803-4168-b602-f014eddd6fa3\Message\nortonOnDark.png
[2021-11-25 09:00][2021-12-20 10:07] 000010816 _____ () 54E7032F160C61A3B0AF0123BD2CA389 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\31ffb35d-2e53-4fba-8282-c6945ce596f5\Message\nortonOnDark.png
[2021-07-19 08:03][2021-07-19 08:03] 000010816 _____ () 6CEC2AC92CA405085CA390E5AD92A1E1 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\1597e3cb-7384-46b6-8373-4c874c514fc1\Message\nortonOnDark.png
[2021-10-10 14:55][2021-10-10 14:55] 000010816 _____ () 7D8730D1C43A215B6CABD919F3AD2432 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\12674afe-f12c-4926-a055-96c064cbe41b\Message\nortonOnDark.png
[2021-09-15 09:59][2021-09-20 09:31] 000010816 _____ () E8FBE2A54BE69B40A2BC97831EBF1283 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\0c808cad-7f6e-4203-a757-69505a5b8a4e\Message\nortonOnDark.png
[2021-12-01 10:09][2021-12-05 12:08] 000010816 _____ () 00392C0D76F549B115C3CE6A868CD406 [Fichier non signé]

C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton\05354ea9-4692-4d25-afb6-47d717c13dee\Message\nortonOnDark.png
[2021-07-13 11:09][2021-07-13 11:09] 000010816 _____ () B0A46A1C58594FAB234DC478F1B92278 [Fichier non signé]


dossier:
========
2020-11-05 17:41 - 2021-02-27 19:02 _____ C:\Windows\System32\Tasks_Migrated\Norton 360
2020-06-04 08:38 - 2021-05-16 15:37 _____ C:\Users\Public\Downloads\Norton
2021-12-30 15:58 - 2021-12-30 16:00 _____ C:\Users\Christine\AppData\Local\Temp\NortonInstall
2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\Users\Christine\AppData\Local\Packages\NortonSecurity_cjtsyd8xszapp
2021-12-30 15:54 - 2021-12-30 15:57 _____ C:\ProgramData\Norton
2020-06-04 08:39 - 2020-06-04 08:39 _____ C:\ProgramData\NortonInstaller
2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\ProgramData\Packages\NortonSecurity_cjtsyd8xszapp
2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\ProgramData\Microsoft\Windows\AppRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp
2021-12-26 19:17 - 2021-12-26 19:17 _____ C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp
2021-03-16 09:25 - 2021-12-24 10:38 _____ C:\FRST\Quarantine\C\Users\Christine\AppData\LocalLow\Norton
2021-12-26 19:29 - 2021-12-26 19:29 _____ C:\FRST\Quarantine\C\Users\Christine\AppData\Local\Norton
2020-06-04 08:38 - 2021-12-30 10:20 _____ C:\FRST\Quarantine\C\ProgramData\Norton
2020-06-04 08:40 - 2021-12-30 09:36 _____ C:\FRST\Quarantine\C\Program Files\Common Files\Symantec Shared
2021-12-26 19:47 - 2021-12-28 12:03 _____ C:\FRST\Quarantine\C\Program Files\Common Files\AV\Norton 360

Registre:
========

===================== Résultats de recherche pour "norton" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32]
""="C:\Program Files\Norton Security\Engine\22.21.11.46\uiWNSNotificationApp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32]
""="C:\Program Files\Norton Security\Engine\22.21.11.46\symamsi.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\file\ShellEx\ContextMenuHandlers\NortonLifeLock.Norton.Antivirus.IEContextMenu]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]
"Path"="C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.20.4.57\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.2.50\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.3.48\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.9.25\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu\CurVer]
""="NortonLifeLock.Norton.Antivirus.IEContextMenu.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NortonSCU.ToolManagerImpl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex\{585E64E1-BDAF-4F47-956F-078F56069684}\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\ClassIndex\{898C4767-C038-447C-A4CE-C8605E22D4DC}\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\0]
"ApplicationId"="NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\0]
"ApplicationDisplayName"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\1]
"ApplicationId"="NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp\Server\1]
"ApplicationDisplayName"="Norton Security"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\0\win32]
""="C:\Program Files\Norton Security\Engine32\22.21.11.46\ToolLib.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CBCE891A-81A2-44BF-9F0A-35464BCD00CE}\1.0\HELPDIR]
""="C:\Program Files\Norton Security\Engine32\22.21.11.46\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}]
"LocalizedString"="@C:\Program Files\Norton Security\Engine32\22.21.11.46\nuPerfScan.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\InprocServer32]
""="C:\PROGRA~1\NORTON~1\Engine32\222111~1.46\ToolLib.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{774068D8-EEA3-4047-BEDA-BC794C9758FA}\ProgID]
""="NortonSCU.ToolManagerImpl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32]
""="C:\Program Files\Norton Security\Engine32\22.21.11.46\symamsi.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\Compatibility\NortonSystemInfo]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\NortonSecurity.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{1122B19A-E671-38EC-8EAC-87048FD4528D}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\nsWscSvc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\nsWscSvc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\nsWscSvc.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{291930BF-AC1E-39B4-A5F3-2E31710715F6}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.20.4.57\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{96F5A003-BE88-6851-3AAD-B25C2F288CAB}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}]
"DISPLAYNAME"="Norton 360"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}]
"PRODUCTEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw\{A6045214-8EAD-7B9C-2E68-BA2B11C858F1}]
"REPORTINGEXE"="C:\Program Files\Norton Security\Engine\22.21.5.44\WSCStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASAPI32]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASMANCS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\NortonSecurity_RASTLS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StagingInfo\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5]
"PackageRelativeApplicationId"="NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5]
"ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Data\3c5]
"_IndexKeys"="Package\7fc\3c5
PackageAndPackageRelativeApplicationId\7fc^NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Application\Index\PackageAndPackageRelativeApplicationId\7fc^NortonSecurity]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\66]
"ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\66]
"_IndexKeys"="Application\3c5\66
UserAndApplication\3^3c5
UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity\66"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\c0]
"ApplicationUserModelId"="NortonSecurity_cjtsyd8xszapp!NortonSecurity"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Data\c0]
"_IndexKeys"="Application\3c5\c0
UserAndApplication\3^3c5
UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity\c0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\ApplicationUser\Index\UserAndApplicationUserModelId\3^NortonSecurity_cjtsyd8xszapp!NortonSecurity]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc]
"PackageFullName"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc]
"InstalledLocation"="C:\Program Files\WindowsApps\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\7fc]
"_IndexKeys"="PackageFamily\73\7fc
PackageFullName\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageExternalLocation\Data\3a]
"Path"="C:\Program Files\Norton Security\Engine\22.21.11.46"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73]
"PackageFamilyName"="NortonSecurity_cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73]
"Publisher"="CN=NortonLifeLock Inc., OU=Norton Product Engineering - CM, O=NortonLifeLock Inc., L=Tempe, S=Arizona, C=US"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Data\73]
"_IndexKeys"="PackageFamilyName\NortonSecurity_cjtsyd8xszapp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName\NortonSecurity_cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\PackageState\S-1-5-21-3911643055-33977892-3237656246-1001\NortonSecurity_cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Arestore.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\asOELnch.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\BHCA.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buIH.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\buVss.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ccSEUPDT.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\chrome.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CLTLMH.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cltRT.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coExport.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coInst.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\coNatHst.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CpySnt.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\cscript.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dcStub.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\dll_register_server.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DNLP0808.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\EFAInst.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ehmsas.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Elaminst.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\excel.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\explorer.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\firefox.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\GEARDIFx.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ieuser.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\iexplore.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstCA.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\InstStub.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\IPSDgnHC.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\MCUI32.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msaccess.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\msimn.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\navw32.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ncolow.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Norton Secure VPN.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nsWscSvc.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\nuPerfScan.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\outlook.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powerpnt.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\powershell.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Ruleup.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevinst.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Sevntx64.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\srtsp_ca.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\sshelper.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\syknlu.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymDgnHC.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymErr.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymHTMLHost.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SymIMI64.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\symimins.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\tuIH.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\uistub.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\visio.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\VPNService.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wfpunins.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winproj.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\winword.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\wscript.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\WSCStub.exe]
"DumpFolder"="C:\ProgramData\Norton\LocalDumps"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules]
"C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20211227.061\IPSEng64.dll"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant]
"ExecutablesToExclude"="C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.21.11.46\InstStub.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{0154667D-1F1F-4758-B35F-4766C41E1CC3}]
"ProfileName"="NortonSecureVpn"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{0154667D-1F1F-4758-B35F-4766C41E1CC3}]
"Description"="NortonSecureVpn"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Unmanaged\010103000F0000F0000200000F0000F02DDBC734AC251FD56B3385FE11C6FF342A92D8CE14F08C9D274526C29F932B1A]
"Description"="NortonSecureVpn"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Unmanaged\010103000F0000F0000200000F0000F02DDBC734AC251FD56B3385FE11C6FF342A92D8CE14F08C9D274526C29F932B1A]
"FirstNetwork"="NortonSecureVpn"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributes"="{
"Version": 162,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD"
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributesVerified"="{
"Version": 162,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD"
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DirectDraw\Compatibility\NortonSystemInfo]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules]
"C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20211227.061\IPSEng32.dll"="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Norton]

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64]
"Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64]
"Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\BHDrvx64]
"Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\BASHDefs\20210223.001\BHDrvx64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64]
"Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64]
"Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\IDSVia64]
"Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\Definitions\IPSDefs\20210226.061\IDSvia64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]
"ServiceName"="NortonSecurity"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]
"Path"=""C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe" /s "NortonSecurity" /m "C:\Program Files\Norton Security\Engine\22.20.5.39\diMaster.dll" /prefetch:1"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]
"Path.Org"=""C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe" /s "NortonSecurity" /m "C:\Program Files\Norton Security\Engine\22.20.5.39\diMaster.dll" /prefetch:1"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]
"Path.Win32"="C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\NortonSecurity]
"DisplayName"="Norton Security"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc]
"Path"=""C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe""

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc]
"Path.Org"=""C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe""

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc]
"Path.Win32"="C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\nsWscSvc]
"DisplayName"="Norton WSC Service"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt]
"Path"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt]
"Path.Org"="\??\C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEvnt]
"Path.Win32"="C:\Program Files\Norton Security\NortonData\22.20.2.57\SymPlatform\SymEvnt.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3911643055-33977892-3237656246-1001]
"\Device\HarddiskVolume4\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\FSDUI_Custom.exe"="0x29C974A28DFDD70100000000000000000000000002000000"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3911643055-33977892-3237656246-1001]
"\Device\HarddiskVolume4\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\DSP-N360-ESD-22.20.2.57.exe"="0xD187EBF68DFDD70100000000000000000000000002000000"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Active Care]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Advanced Uninstaller]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Bye Pass]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Disk Defrag]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Drive Scrubber]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Internet Cleaner]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Malware Killer]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Memory Mechanic]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Message Toaster]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\NetBooster]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Network Scanner]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\On Demand Boost]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Privacy Guardian]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Process Scanner]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Product Installer]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Registry Cleaner]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Search and Recover]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Startup Optimizer]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Checkup]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Mechanic]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\System Shield]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\iolo Applications\Windows Junk Cleaner]
"EventMessageFile"="C:\ProgramData\Norton\EventMsg.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules]
"{2BA6F5AE-245A-4C5C-80C0-2BFCD3AE7551}"="v2.30|Action=Block|Active=TRUE|Dir=In|Name=Norton Security|Desc=Norton Security|LUOwn=S-1-5-21-3911643055-33977892-3237656246-1001|AppPkgId=S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677|EmbedCtxt=Norton Security|"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules]
"{8D09E6EC-4CBE-4EB7-BDF4-B8F5FDAAF1D0}"="v2.30|Action=Block|Active=TRUE|Dir=Out|Name=Norton Security|Desc=Norton Security|LUOwn=S-1-5-21-3911643055-33977892-3237656246-1001|AppPkgId=S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677|EmbedCtxt=Norton Security|"

[HKEY_USERS\.DEFAULT\Software\Classes\NortonSecurity]

[HKEY_USERS\.DEFAULT\Software\Classes\NortonSecurity]
"URL Protocol"="nortonsecurity://show"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.1.151\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.2.50\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.3.48\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.5.44\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.9.25\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MuiCache]
"C:\Program Files\Norton Security\Engine\22.21.11.46\NortonSecurity.exe"="Norton Security"

[HKEY_USERS\.DEFAULT\Software\Norton]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\AppDataLow\Software\Norton]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\MostRecentApplication]
"Name"="NORTONSECURITY.EXE"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\MostRecentApplication]
"Id"="NORTONSECURITY.EXE6066105D00053D28"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5EC58F39000542B8]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5EC58F39000542B8]
"Name"="NORTONSECURITY.EXE"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D00]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D00]
"Name"="NORTONSECURITY.EXE"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D28]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE5F98A39B00053D28]
"Name"="NORTONSECURITY.EXE"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE6066105D00053D28]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\DirectInput\NORTONSECURITY.EXE6066105D00053D28]
"Name"="NORTONSECURITY.EXE"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Office\Outlook\Addins\MsouPlug.OutlookPlug]
"FriendlyName"="Norton AntiSpam Outlook Plugin"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Office\Outlook\Addins\MsouPlug.OutlookPlug]
"Description"="Norton AntiSpam Outlook Plugin"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB\NortonSecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\NortonSecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"Symantec.Norton Security"="128"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"NortonLifeLock.Norton Security"="477"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched]
"NortonLifeLock.Norton Security"="27"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"NortonSecureVpn"="0x4600000002000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications\Backup\NortonSecurity_cjtsyd8xszapp!NortonSecurity]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Norton Download Manager{DSP-N360-22200257-SHPD-FSD5220003}"="C:\Users\Public\Downloads\Norton\{DSP-N360-22200257-SHPD-FSD5220003}\FSDUI_Custom.exe /m /WIN10_UPGRADE "C:\Users\CHRIST~1\AppData\Local\Temp\{90FCB8B8-6A37-40CD-BA7D-0F6235A23E92}\Upgrade.exe" /m"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.20.4.57\uiStub.exe"="0x534143500100000000000000070000002800000040EF04007405050001000000000000000000000A00210000631F6E6F0EDED40100000000000000000200000028000000000000000000000000000000000000000000000000000000863D0000000000000800000008000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.20.5.39\uiStub.exe"="0x5341435001000000000000000700000028000000C8EF0400E607050001000000000000000000000A00210000631F6E6F0EDED40100000000000000000200000028000000000000000000000000000000000000000000000000000000AF3E0000000000001500000015000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.1.151\uiStub.exe"="0x534143500100000000000000070000002800000090E90400005A050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000002E080000000000000500000005000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.2.50\uiStub.exe"="0x5341435001000000000000000700000028000000B8E90400E391050001000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000FD3E0000000000000A0000000A000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\Public\Downloads\Norton\{DSP-N360-2221348-SHPD-FSD5250006}\DSP-N360-ESD-22.21.3.48.exe"="0x5341435001000000000000000700000028000000F8E7E70B1C39E80B01000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000637E0100000000000100000001000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.3.48\uiStub.exe"="0x5341435001000000000000000700000028000000B8E90400BFD4050001000000000000000000000A0021000050BB64EDDDACD50100000000000000000200000028000000000000000000000000000000000000000000000000000000290E0000000000000400000004000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.5.44\uiStub.exe"="0x5341435001000000000000000700000028000000F0E90400E61E050001000000000000000000000A0021000050BB64EDDDACD5010000000000000000020000002800000000000000000000000000000000000000000000000000000003650000000000000A0000000A000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.6.51\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400AB65050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000006C020100000000000B0000000B000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.8.62\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400ED0D050001000000000000000000000A0021000050BB64EDDDACD5010000000000000000020000002800000000000000000000000000000000000000000000000000000080650000000000000500000005000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\Norton Security\Engine\22.21.10.40\uiStub.exe"="0x5341435001000000000000000700000028000000D0CE0400C06C050001000000000000000000000A0021000050BB64EDDDACD501000000000000000002000000280000000000000000000000000000000000000000000000000000005B660000000000000400000004000000"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Norton]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\ActivatableClasses\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\MuiCache\72\E27DDEF7]
"@C:\PROGRA~1\NORTON~1\Branding\muis.dll,-601"="Norton 360"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677]
"DisplayName"="Norton Security"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1822585594-508615732-2315597744-1420068480-4230896809-2797099601-3226071677]
"Moniker"="nortonsecurity_cjtsyd8xszapp"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\nortonsecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache\NortonSecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\NortonSecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families\NortonSecurity_cjtsyd8xszapp\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]
"PackageRootFolder"="C:\Program Files\Norton Security\Engine\22.21.11.46"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]
"DisplayName"="Norton Security"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]
"PackageID"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp\Schemas]
"PackageFullName"="NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\NortonSecurity_cjtsyd8xszapp\SplashScreen\NortonSecurity_cjtsyd8xszapp!NortonSecurity]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"D:\Mes Données\Downloads\N360Downloader.exe.FriendlyAppName"="Norton Download Manager"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"D:\Mes Données\Downloads\N360Downloader.exe.ApplicationCompany"="NortonLifeLock Inc."

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\NortonSecurity]

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\NortonSecurity\shell\open\command]
""="C:\Program Files\Norton Security\Engine\22.21.10.40\uistub.exe /cct"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Classes\PackagedCom\Package\NortonSecurity_1.0.0.0_neutral__cjtsyd8xszapp]


===================== Résultats de recherche pour "symantec" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributes"="{
"Version": 162,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD"
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings]
"TargetingAttributesVerified"="{
"Version": 162,
"SchemaVersion": 1,
"PartA": [
"App",
"AppVer",
"AttrDataVer"
],
"Default": [
"DeviceFamily",
"f:FlightRing",
"t:OSVersionFull"
],
"PartB": {
"ACSOVERRIDE": [
"OSArchitecture",
"c:IsAlwaysOnAlwaysConnectedCapable"
],
"CASSCLIENT": [
"OSVersion",
"c:OSEdition",
"f:FlightRing",
"c:OSUILocale"
],
"CDM": [
"ChassisTypeId",
"r:CurrentBranch",
"DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"c:InstallLanguage",
"c:IsDomainJoined",
"t:IsTestLab",
"OEMModel",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:ProcessorIdentifier",
"c:TelemetryLevel",
"t:IsMsftOwned",
"t:WCOSProductId",
"c:OSUILocale",
"c:CommercialId",
"s:MinShellVersion",
"s:MaxShellVersion",
"c:ActivationChannel",
"c:SCCMClientId",
"c:IsCloudDomainJoined",
"r:WebExperience",
"FX_FlightIds",
"AccountFirstChar"
],
"COMPATLOGGER": [
"osVer",
"ring",
"deviceId"
],
"CONTENT_DELIVERY_MANAGER": [
"c:OSEdition",
"t:OSSkuId",
"c:OSUILocale",
"a:UpgEx_CO21H2",
"a:GStatus_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:TimestampEpochString_CO21H2"
],
"CORTANA_GATEKEEPER": [
"r:CurrentBranch",
"f:FlightRing",
"f:IsRetailOS"
],
"CORTANAUWP": [
"c:OSUILocale",
"t:OSVersionFull",
"v:CortanaAppVer"
],
"CORTANAUWPTEST": [
"+CORTANAUWP",
"v:CortanaAppVerTest"
],
"CTAC": [
"+FSS"
],
"DDC": [
"+WU_STORE",
"+_WU_PTI"
],
"DXDB": [
"DeviceFamily",
"f:FlightRing",
"r:IsHybridOrXGpu",
"t:OSVersionFull",
"OSVersion"
],
"EDGE_SERVICEUI": [
"t:LocalDeviceID",
"t:LocalUserID"
],
"FCON": [
"+CDM"
],
"FSS": [
"r:PreviewBuildsManagerEnabled",
"f:BranchReadinessLevelRaw",
"u:BranchReadinessLevelSource",
"r:BuildFID",
"t:DeviceFamily",
"DeviceId",
"c:EnablePreviewBuilds",
"f:FlightingPolicyValue",
"f:IsRetailOS",
"f:ManagePreviewBuilds",
"OSVersionFull",
"t:WCOSProductId",
"r:SmartActiveHoursState",
"r:ActiveHoursStart",
"r:ActiveHoursEnd",
"r:IsCHCapableBuild",
"r:FSRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"c:TPMVersion",
"c:SecureBootCapable",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:TotalPhysicalRAM",
"t:SMode",
"c:SystemVolumeTotalCapacity",
"c:OEMManufacturerName",
"c:OEMModelNumber",
"a:ISVM",
"r:AllowUpgradesWithUnsupportedTPMOrCPU",
"r:IntelPlatformId",
"r:IsConfigMgrEnabled"
],
"FXIRISCLIENT": [
"+IRISCLIENT"
],
"GS": [
"t:OSSkuId",
"t:OSVersionFull",
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"c:FlightIds",
"f:FlightingBranchName",
"f:FlightRing",
"c:IsCloudDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"c:OSUILocale",
"c:IsDomainJoined"
],
"IRISCLIENT": [
"DeviceFamily",
"OSVersion",
"t:OSSkuId",
"OSArchitecture",
"c:TelemetryLevel",
"f:FlightRing",
"f:FlightingBranchName",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical",
"t:IsMsftOwned",
"c:ChassisType",
"c:ProcessorIdentifier",
"OEMModel",
"c:OSUILocale",
"c:OSEdition",
"c:FlightIds",
"r:CurrentBranch",
"t:WCOSProductId",
"c:InstallationType",
"r:InstallDate",
"c:IsCloudDomainJoined",
"c:IsDeviceRetailDemo",
"f:IsRetailOS",
"c:ProcessorClockSpeed",
"c:ProcessorCores",
"c:ProcessorManufacturer",
"c:TotalPhysicalRAM",
"c:D3DMaxFeatureLevel",
"c:IsAlwaysOnAlwaysConnectedCapable",
"t:SMode",
"t:LocalUserID"
],
"MICROSOFT.WINDOWSFEEDBACKHUB_8WEKYB3D8BBWE": [
"t:OSVersionFull",
"t:IsTestLab",
"f:FlightRing"
],
"MITIGATION": [
"t:DeviceFamily",
"f:FlightRing",
"c:FlightIds",
"c:IsDomainJoined",
"t:IsMsftOwned",
"f:IsRetailOS",
"t:IsTestLab",
"IsVM",
"OEMModel",
"c:OSEdition",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"t:SMode",
"f:IsFlightingEnabled",
"c:FirmwareVersion",
"c:TelemetryLevel",
"f:FlightingBranchName",
"r:CurrentBranch",
"OSVersion",
"w:FirstStorageSpaceDeviceId",
"r:IsCldFltSyncRoots",
"c:OSInstallType",
"v:IsNotepadExePresent",
"r:StrictHiveSecurityReg",
"a:GatedBlockId_21H1",
"r:UpdateOfferedDays",
"r:UsoScanMitigation",
"r:GamingServicesInstalledKey"
],
"MLMOD": [
"ChassisTypeId",
"t:DeviceFamily",
"f:FlightingBranchName",
"f:FlightRing",
"f:IsRetailOS",
"t:OSSkuId",
"t:OSVersionFull",
"c:OSUILocale",
"OSVersion",
"c:TelemetryLevel",
"r:CurrentBranch",
"t:IsTestLab"
],
"MTP": [
"+_WU_OS_CORE"
],
"MUSE": [
"+_WU_FB",
"ChassisTypeId",
"deviceClass",
"deviceId",
"c:FlightIds",
"locale",
"ms",
"os",
"osVer",
"ring",
"sampleId",
"sku",
"r:DaysSince19H1FUOffer",
"u:DisableDualScan",
"u:UpdateServiceUrl",
"c:CommercialId",
"f:FlightingBranchName",
"c:SystemVolumeTotalCapacity",
"c:IsAlwaysOnAlwaysConnectedCapable",
"c:ProcessorCores",
"c:PrimaryDiskType",
"c:TotalPhysicalRAM",
"c:ProcessorClockSpeed",
"c:ProcessorIdentifier",
"c:ProcessorModel",
"c:ActivationChannel",
"c:IsCloudDomainJoined",
"c:isCommercial",
"c:IsDomainJoined",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:OEMSubModel",
"c:OEMModelNumber",
"c:OEMManufacturerName",
"r:OobeSeeker",
"r:DefaultUserRegion"
],
"NOISYHAMMER": [
"+WU_OS"
],
"SEDIMENTPACK": [
"+WU_OS"
],
"SERVICEEXPERIENCES": [
"f:FlightingBranchName",
"f:FlightRing",
"s:MaxShellVersion",
"s:MinShellVersion",
"t:IsTestLab",
"c:TelemetryLevel",
"t:OSSkuId",
"r:CurrentBranch",
"OSVersion",
"DeviceFamily",
"r:WSX_Windows_Settings_Account",
"c:FlightIds"
],
"SERVICING_CBS": [
"+WU",
"osVer"
],
"SETUP360": [
"t:OSSkuId",
"f:FlightRing"
],
"STORAGEGROVELER": [
"a:Free",
"c:TelemetryLevel",
"f:FlightRing",
"f:IsFlightingEnabled",
"IsVM",
"t:OSVersionFull"
],
"UTC": [
"+UTC_STATIC",
"osVer",
"locale",
"ring",
"f:PilotRing",
"f:IsRetailOS",
"ms",
"expId",
"t:SMode",
"f:FlightingBranchName",
"c:CommercialId",
"r:IsFeedbackHubSelfhost",
"c:AzureVMType"
],
"UTC_STATIC": [
"os",
"deviceId",
"sampleId",
"deviceClass",
"sku",
"OEMModel",
"OEMName_Uncleaned",
"c:PrimaryDiskType",
"c:ProcessorModel",
"c:TotalPhysicalRAM"
],
"UUS": [
"OSVersion",
"f:FlightRing",
"t:IsTestLab",
"t:OSVersionFull",
"f:FlightingBranchName",
"r:CurrentBranch",
"f:IsFlightingEnabled"
],
"WAASASSESSMENT": [
"+WU_OS"
],
"WAASMEDIC": [
"os",
"osVer",
"ring",
"deviceClass",
"deviceId",
"locale",
"sku",
"c:ActivationChannel",
"c:CommercialId",
"r:CurrentBranch",
"f:FlightingBranchName",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"t:IsTestLab",
"OSVersion",
"c:SCCMClientID",
"c:TelemetryLevel"
],
"WOSC": [
"t:DeviceFamily",
"f:FlightRing",
"f:IsFlightingEnabled",
"t:IsMsftOwned",
"t:LocalDeviceID",
"t:OSSkuId",
"c:OSUILocale",
"t:OSVersionFull",
"c:TelemetryLevel",
"r:IsHybridOrXGpu",
"r:PlayFabPartyRelay"
],
"WPSHIFT": [
"+MTP"
],
"WU": [
"+WU_OS",
"r:DUInternal"
],
"_WU_AV": [
"r:AvastReg",
"r:AvastBlackScreen",
"v:AvastVer",
"r:AvgReg",
"v:AvgVer",
"r:EsetReg",
"v:EsetVer",
"r:KasperskyReg",
"v:KasperskyVer",
"v:SymantecVer",
"r:TencentReg",
"r:TencentType",
"r:AhnlabInstalledKey",
"r:AvastInstalledKey",
"r:AVGInstalledKey",
"r:AviraInstalledKey",
"r:BullguardInstalledKey",
"r:ESETInstalledKey",
"r:ESTSecurityInstalledKey",
"r:FSecureInstalledKey",
"v:GDataInstalledVer",
"r:K7InstalledKey",
"r:KasperskyInstalledKey",
"r:KingsoftInstalledKey",
"r:LenovoInstalledKey",
"r:MalwarebytesInstalledKey",
"r:McAfeeInstalledKey",
"r:PandaInstalledKey",
"r:QuickhealInstalledKey1",
"r:SophosInstalledKey1",
"r:SymantecInstalledKey",
"r:TencentInstalledKey",
"r:ThreatTrackInstalledKey",
"r:TrendInstalledKey",
"r:WebrootInstalledKey",
"v:K7InstalledVer"
],
"_WU_COMMON": [
"r:CurrentBranch",
"r:DefaultUserRegion",
"DeviceFamily",
"r:DriverPartnerRing",
"r:FlightContent",
"f:FlightingBranchName",
"f:FlightRing",
"HoloLens",
"c:InstallationType",
"c:InstallLanguage",
"f:IsFlightingEnabled",
"r:IsFlightingEnabled",
"c:MobileOperatorCommercialized",
"OEMModel",
"OEMName_Uncleaned",
"r:OemPartnerRing",
"OSArchitecture",
"OSVersion",
"t:OSSkuId",
"c:OSUILocale",
"c:ProcessorManufacturer",
"r:ReleaseType",
"v:SkypeRoomSystem",
"t:SMode",
"c:TelemetryLevel",
"r:WindowsMixedReality",
"v:WuClientVer",
"p:DucPublisherId",
"p:DucDeviceModelId",
"p:DucOemPartnerRing",
"p:DucCustomPackageId",
"p:DesiredOsVersion",
"p:DesiredSystemManifestVersion"
],
"_WU_FB": [
"u:BranchReadinessLevel",
"u:DeferQualityUpdatePeriodInDays",
"u:DeferFeatureUpdatePeriodInDays",
"r:PausedFeatureStatus",
"r:PausedQualityStatus",
"u:TargetReleaseVersion",
"r:QUDeadline",
"r:UpdatePreference",
"r:UpdateOfferedDays",
"u:TargetProductVersion"
],
"WU_OS": [
"+_WU_OS_CORE",
"+_WU_FB"
],
"_WU_OS_CORE": [
"+_WU_COMMON",
"+_WU_AV",
"r:AhnLabKeyboard",
"a:Bios",
"r:BlockFeatureUpdates",
"c:CommercialId",
"a:DataVer_RS5",
"r:DisconnectedStandby",
"r:DchuNvidiaGrfxExists",
"r:DchuNvidiaGrfxVen",
"r:DchuIntelGrfxExists",
"r:DchuIntelGrfxVen",
"r:DchuAmdGrfxExists",
"r:DchuAmdGrfxVen",
"c:FirmwareVersion",
"a:Free",
"a:GStatus_RS3",
"a:GStatus_RS4",
"a:GStatus_RS5",
"r:HidOverGattReg",
"r:InstallDate",
"c:IsDeviceRetailDemo",
"c:IsPortableOperatingSystem",
"IsVM",
"c:OEMModelBaseBoard",
"r:OobeSeeker",
"r:OSRollbackBuild",
"r:OSRollbackCount",
"r:OSRollbackDate",
"PhoneTargetingName",
"r:PonchAllow",
"r:PonchBlock",
"c:ProcessorIdentifier",
"r:RecoveredFromBuild",
"r:RecoveredOnDate",
"r:Steam",
"v:TobiiVer",
"v:TrendMicroVer",
"r:UninstallActive",
"l:UpdateManagementGroup",
"a:UpgEx_RS3",
"a:UpgEx_RS4",
"a:UpgEx_RS5",
"a:Version_RS5",
"r:DisableWUfBOfferBlock",
"a:UpgEx_19H1",
"a:SdbVer_19H1",
"a:GStatus_19H1",
"a:GStatus_19H1Setup",
"a:TimestampEpochString_19H1Setup",
"a:GenTelRunTimestamp_19H1",
"a:DataExpDateEpoch_19H1",
"u:EnableWUfBUpgradeGates",
"r:GStatusBlockIDs_All",
"TimestampDelta_19H1Subtract19H1Setup",
"DataExpDateDelta_19H1Subtract19H1Setup",
"a:DataExpDateEpoch_19H1Setup",
"a:TimestampEpochString_19H1",
"r:IsContainerMgrInstalled",
"r:IsWDAGEnabled",
"r:MTPTargetingInfo",
"r:EKB19H2InstallCount",
"r:EKB19H2UnInstallCount",
"r:EKB19H2InstallTimeEpoch",
"r:EKB19H2UnInstallTimeEpoch",
"r:BlockEdgeWithChromiumUpdate",
"r:IsWDATPEnabled",
"r:IsAutopilotRegistered",
"r:EdgeWithChromiumInstallVersion",
"r:EdgeWithChromiumInstallFailureCount",
"r:IsEdgeWithChromiumInstalled",
"r:KioskMode",
"c:IsCloudDomainJoined",
"c:IsDomainJoined",
"p:DSS_Enrolled",
"a:DataExpDateEpoch_20H1",
"a:DataExpDateEpoch_20H1Setup",
"a:GStatus_20H1",
"a:GStatus_20H1Setup",
"a:SdbVer_20H1",
"a:TimestampEpochString_20H1",
"a:TimestampEpochString_20H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup",
"TimestampDelta_20H1Subtract20H1Setup",
"a:UpgEx_20H1",
"r:AutopilotUpdateInProgress",
"r:UHSEnrolled",
"r:HotPatchEKBInstalled",
"r:LCUVer",
"c:isCommercial",
"c:ActivationChannel",
"c:IsMDMEnrolled",
"c:SCCMClientID",
"r:ChinaTypeApproval_CTA",
"p:DesiredOcpVersion",
"r:UpgradeEligible",
"r:AllowInPlaceUpgrade",
"r:SH_SIPolicyCleanup",
"r:FeatureUpdateDeadline",
"a:DataExpDateEpoch_21H1",
"a:UpgEx_CO21H2",
"a:GStatus_21H1",
"DataExpDateDelta_21H1Subtract20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup",
"a:TimestampEpochString_21H1",
"r:OEMSubModel",
"c:ProcessorModel",
"c:TPMVersion",
"r:StayOnWindows10Timestamp",
"a:GStatus_CO21H2Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup",
"a:TimestampEpochString_CO21H2Setup",
"a:DataExpDateEpoch_CO21H2Setup",
"a:TimestampEpochString_CO21H2",
"a:DataExpDateEpoch_CO21H2",
"a:GStatus_CO21H2",
"p:SetPolicyDrivenUpdateSourceForFeatureUpdates",
"r:DchuNvidiaGrfxVenTest",
"a:DataExpDateDelta_21H2Subtract20H1Setup",
"a:TimestampEpochString_21H2",
"a:TimestampDelta_21H2Subtract20H1Setup",
"a:GStatus_21H2",
"a:DataExpDateEpoch_21H2",
"r:DSS_Enrolled_DF",
"r:UpgradeAccepted",
"r:SetupDisplayedEulaVersion",
"c:ProcessorCores",
"c:ProcessorClockSpeed",
"c:TotalPhysicalRAM",
"c:SecureBootCapable",
"c:PrimaryDiskTotalCapacity",
"r:BitDefenderInstalledKey",
"r:BroadcomInstalledKey",
"v:CrowdStrikeInstalledVer",
"r:QihooInstalledKey"
],
"_WU_PTI": [
"c:FrontFacingCameraResolution",
"c:RearFacingCameraResolution",
"c:TotalPhysicalRAM",
"c:NFCProximity",
"c:Magnetometer",
"c:Gyroscope",
"c:D3DMaxFeatureLevel",
"c:InternalPrimaryDisplayResolutionHorizontal",
"c:InternalPrimaryDisplayResolutionVetical"
],
"WU_STORE": [
"+_WU_COMMON",
"r:AppChannels",
"r:AppRMIDs",
"u:BranchReadinessLevel"
]
},
"Required": [
"App",
"AppVer",
"AttrDataVer"
],
"Aliases": {
"AccountFirstChar": "c:MSA_Accounts",
"ChassisTypeId": "c:ChassisType",
"DataExpDateDelta_19H1Subtract19H1Setup": "a:DataExpDateEpoch_19H1_Subtract_DataExpDateEpoch_19H1Setup",
"DataExpDateDelta_20H1Subtract20H1Setup": "a:DataExpDateEpoch_20H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_21H1Subtract20H1Setup": "a:DataExpDateEpoch_21H1_Subtract_DataExpDateEpoch_20H1Setup",
"DataExpDateDelta_CO21H2SubtractCO21H2Setup": "a:DataExpDateEpoch_CO21H2_Subtract_DataExpDateEpoch_CO21H2Setup",
"deviceClass": "t:DeviceFamily",
"deviceId": "t:LocalDeviceID",
"DeviceId": "t:LocalDeviceID",
"expId": "c:FlightIds",
"FlightRing": "f:FlightRing",
"FX_FlightIds": "c:FlightIds",
"IsVM": "a:ISVM",
"locale": "c:OSUILocale",
"ms": "t:IsMsftOwned",
"OEMModel": "c:OEMModelNumber",
"OEMName_Uncleaned": "c:OEMManufacturerName",
"osVer": "t:OSVersionFull",
"OSVersionFull": "t:OSVersionFull",
"PhoneTargetingName": "c:OEMModelName",
"ring": "f:FlightRing",
"sampleId": "t:PopVal",
"sku": "t:OSSkuId",
"TimestampDelta_19H1Subtract19H1Setup": "a:TimestampEpochString_19H1_Subtract_TimestampEpochString_19H1Setup",
"TimestampDelta_20H1Subtract20H1Setup": "a:TimestampEpochString_20H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_21H1Subtract20H1Setup": "a:TimestampEpochString_21H1_Subtract_TimestampEpochString_20H1Setup",
"TimestampDelta_CO21H2SubtractCO21H2Setup": "a:TimestampEpochString_CO21H2_Subtract_TimestampEpochString_CO21H2Setup"
},
"Fallback": {
"r:AhnlabInstalledKey": "r:AhnlabInstalledWowKey",
"r:AvastBlackScreen": "r:AvgBlackScreen",
"r:AvastInstalledKey": "r:AvastInstalledWowKey",
"r:AVGInstalledKey": "r:AVGInstalledWowKey",
"r:AviraInstalledKey": "r:AviraInstalledWowKey",
"a:Bios": "a:Bios_RS3",
"a:Bios_RS3": "a:Bios_RS4",
"a:Bios_RS4": "a:Bios_RS5",
"r:BlockFeatureUpdates": "r:BlockWUUpgrades",
"r:BlockWUUpgrades": "r:BlockWUUpgradesWow",
"r:BuildFID": "r:BuildFID_WCOS",
"r:BuildFID_WCOS": "r:BuildFID_WCOS2",
"r:BullguardInstalledKey": "v:BullguardInstalledVer",
"a:DataExpDateEpoch_CO21H2": "r:DataExpDateEpoch_CO21H2RegFb",
"r:DchuAmdGrfxVen": "r:DchuAmdGrfxVen2",
"r:DchuAmdGrfxVen2": "r:DchuAmdGrfxDeletePending",
"r:DchuIntelGrfxDeletePending": "r:DchuIntelGrfxNExists",
"r:DchuIntelGrfxVen": "r:DchuIntelGrfxVen2",
"r:DchuIntelGrfxVen2": "r:DchuIntelGrfxDeletePending",
"r:DchuNvidiaGrfxVen": "r:DchuNvidiaGrfxVen2",
"r:DchuNvidiaGrfxVen2": "r:DchuNvidiaGrfxDeletePending",
"r:DriverPartnerRing": "r:OSDataDriverPartnerRing",
"p:DSS_Enrolled": "r:DSS_EnrolledReg",
"r:EdgeWithChromiumInstallFailureCount": "r:EdgeWithChromiumInstallFailureCountWow",
"r:EdgeWithChromiumInstallVersion": "r:EdgeWithChromiumInstallVersionWow",
"u:EnableWUfBUpgradeGates": "r:EnableWUfBUpgradeGatesRS5",
"r:ESETInstalledKey": "r:ESETInstalledWowKey",
"r:ESTSecurityInstalledKey": "r:ESTSecurityInstalledWowKey",
"f:FlightingBranchName": "c:FlightingBranchName",
"a:Free": "a:Free_RS3",
"a:Free_RS3": "a:Free_RS4",
"a:Free_RS4": "a:Free_RS5",
"r:FSecureInstalledKey": "r:FSecureInstalledWowKey",
"a:GStatus_CO21H2": "r:GStatus_CO21H2RegFb",
"HoloLens": "r:WindowsMixedReality",
"r:IsEdgeWithChromiumInstalled": "r:IsEdgeWithChromiumInstalledWow",
"a:ISVM": "a:ISVM_RS3",
"a:ISVM_RS3": "a:ISVM_RS4",
"a:ISVM_RS4": "a:ISVM_RS5",
"r:K7InstalledKey": "r:K7InstalledWowKey",
"r:KasperskyInstalledKey": "r:KasperskyInstalledWowKey",
"r:KingsoftInstalledKey": "r:KingsoftInstalledWowKey",
"r:LenovoInstalledKey": "r:LenovoInstalledWowKey",
"r:MalwarebytesInstalledKey": "r:MalwarebytesInstalledWowKey",
"r:McAfeeInstalledKey": "r:McAfeeInstalledWowKey",
"c:OEMModelBaseBoard": "r:OEMModelBaseBoard",
"r:PandaInstalledKey": "r:PandaInstalledWowKey",
"r:PandaInstalledWowKey": "v:PandaInstalledVer",
"r:PonchAllow": "r:PonchAllowKey",
"r:PonchAllowKey": "r:PonchAllowWow",
"r:PonchAllowWow": "r:PonchAllowWowKey",
"r:QUDeadline": "r:QUDeadlineMDM",
"r:QuickhealInstalledKey1": "r:QuickhealInstalledKey2",
"r:SophosInstalledKey1": "r:SophosInstalledKey2",
"r:SymantecInstalledKey": "r:SymantecInstalledWowKey",
"v:SymantecVer": "v:SymantecVer64",
"u:TargetReleaseVersion": "r:TargetReleaseVersionGP",
"r:TargetReleaseVersionGP": "r:TargetReleaseVersionMDM",
"r:TencentInstalledKey": "r:TencentInstalledWowKey",
"r:ThreatTrackInstalledKey": "r:ThreatTrackInstalledWowKey",
"a:TimestampEpochString_CO21H2": "r:TimestampEpochString_CO21H2RegFb",
"v:TobiiVer": "v:TobiiVerx86",
"v:TobiiVerx86": "v:TobiiVer1x86",
"r:TrendInstalledKey": "r:TrendInstalledWowKey",
"r:TrendInstalledWowKey": "v:TrendInstalledVer",
"a:UpgEx_CO21H2": "r:UpgEx_CO21H2RegFb",
"r:WebExperience": "r:WebExperienceWow",
"r:WebrootInstalledKey": "r:WebrootInstalledWowKey"
},
"Transform": {
"AccountFirstChar": {
"SubLength": 1
},
"FX_FlightIds": {
"Regex": "FX:[^,]*",
"RegexDelimiter": ","
},
"IsDomainJoined": {
"Ignore": [
"0"
]
},
"IsHybridOrXGpu": {
"Ignore": [
"0"
]
},
"IsMsftOwned": {
"Ignore": [
"0"
]
},
"IsPortableOperatingSystem": {
"Ignore": [
"0"
]
},
"IsTestLab": {
"Ignore": [
"0"
]
},
"IsVM": {
"Ignore": [
"0"
]
},
"OEMModel": {
"SubLength": 100
},
"OEMName_Uncleaned": {
"SubLength": 100
},
"PausedFeatureStatus": {
"Ignore": [
"0"
]
},
"PausedQualityStatus": {
"Ignore": [
"0"
]
},
"SMode": {
"Ignore": [
"0"
]
}
},
"Registry": {
"ActiveHoursEnd": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursEnd",
"RegValueType": "REG_DWORD"
},
"ActiveHoursStart": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "ActiveHoursStart",
"RegValueType": "REG_DWORD"
},
"AhnlabInstalledKey": {
"FullPath": "SOFTWARE\\Ahnlab",
"IfExists": true
},
"AhnlabInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Ahnlab",
"IfExists": true
},
"AhnLabKeyboard": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\Mkd2kfNt",
"ValueName": "NbTpMsExist"
},
"AllowInPlaceUpgrade": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "AllowInPlaceUpgrade",
"RegValueType": "REG_DWORD"
},
"AllowUpgradesWithUnsupportedTPMOrCPU": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "AllowUpgradesWithUnsupportedTPMOrCPU",
"RegValueType": "REG_DWORD"
},
"AppChannels": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ChannelId",
"EncodingType": "Json"
},
"AppRMIDs": {
"FullPath": "SOFTWARE\\Policies\\Microsoft\\WindowsStore\\Apps\\*",
"ValueName": "ReleaseManagementId",
"EncodingType": "Json"
},
"AutopilotUpdateInProgress": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotSettings\\VolatileAutopilotUpdate",
"ValueName": "AutopilotUpdateInProgress",
"RegValueType": "REG_DWORD"
},
"AvastBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AvastInstalledKey": {
"FullPath": "SOFTWARE\\Avast Software\\Avast",
"IfExists": true
},
"AvastInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Avast Software\\Avast",
"IfExists": true
},
"AvastReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\aswVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AvgBlackScreen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "Win10-1803"
},
"AVGInstalledKey": {
"FullPath": "SOFTWARE\\AVG\\Antivirus",
"IfExists": true
},
"AVGInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\AVG\\Antivirus",
"IfExists": true
},
"AvgReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\avgVmm\\Parameters",
"ValueName": "QualityCompat"
},
"AviraInstalledKey": {
"FullPath": "SOFTWARE\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"AviraInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\X-AVCSD\\Workstation\\Antivirus",
"IfExists": true
},
"BitDefenderInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}",
"IfExists": true
},
"BlockEdgeWithChromiumUpdate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "DoNotUpdateToEdgeWithChromium",
"RegValueType": "REG_DWORD"
},
"BlockFeatureUpdates": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade",
"ValueName": "BlockFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgrades": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BlockWUUpgradesWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows10Upgrader\\Volatile",
"ValueName": "BlockWUUpgrades",
"RegValueType": "REG_DWORD"
},
"BroadcomInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Symantec\\Symantec Endpoint Protection",
"IfExists": true
},
"BuildFID": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Software\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BuildFID_WCOS2": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSDATA\\Microsoft\\Windows\\CurrentVersion\\Flighting\\Build",
"ValueName": "EsdFlightData",
"RegValueType": "REG_SZ"
},
"BullguardInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\BullGuard",
"IfExists": true
},
"ChinaTypeApproval_CTA": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeviceAccess",
"ValueName": "ActivePolicyCode",
"RegValueType": "REG_SZ"
},
"CurrentBranch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "BuildBranch",
"RegValueType": "REG_SZ"
},
"DataExpDateEpoch_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "DataExpDateEpoch",
"RegValueType": "REG_SZ"
},
"DaysSince19H1FUOffer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\rempl\\irplugin",
"ValueName": "DaysSinceLastOffer",
"RegValueType": "REG_QWORD"
},
"DchuAmdGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DriverDelete"
},
"DchuAmdGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"IfExists": true
},
"DchuAmdGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag",
"ValueName": "DCHUVen"
},
"DchuAmdGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\amdkmdag\\Parameters",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DriverDelete"
},
"DchuIntelGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"IfExists": true
},
"DchuIntelGrfxNExists": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfxn",
"IfExists": true
},
"DchuIntelGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx",
"ValueName": "DCHUVen"
},
"DchuIntelGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\igfx\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxDeletePending": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DriverDelete"
},
"DchuNvidiaGrfxExists": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"IfExists": true
},
"DchuNvidiaGrfxVen": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVen2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm\\Parameters",
"ValueName": "DCHUVen"
},
"DchuNvidiaGrfxVenTest": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\nvlddmkm",
"ValueName": "DCHUVenTest",
"RegValueType": "REG_DWORD"
},
"DefaultUserRegion": {
"HKey": "HKEY_USERS",
"FullPath": ".DEFAULT\\Control Panel\\International\\Geo",
"ValueName": "Nation",
"RegValueType": "REG_SZ"
},
"DisableWUfBOfferBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "DisableWUfBOfferBlock",
"RegValueType": "REG_DWORD"
},
"DisconnectedStandby": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Control\\Power",
"ValueName": "EnforceDisconnectedStandby",
"RegValueType": "REG_DWORD"
},
"DriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"DSS_Enrolled_DF": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Policies\\\\Microsoft\\\\Windows\\\\WindowsUpdate",
"ValueName": "WUfBDF",
"RegValueType": "REG_DWORD"
},
"DSS_EnrolledReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "EnableWUfBCloud",
"RegValueType": "REG_DWORD"
},
"DUInternal": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\MoSetup",
"ValueName": "DynamicUpdateInternalTest",
"RegValueType": "REG_DWORD"
},
"EdgeWithChromiumInstallFailureCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallFailureCountWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateAttempts"
},
"EdgeWithChromiumInstallVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EdgeWithChromiumInstallVersionWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate",
"ValueName": "WindowsUpdateVersion"
},
"EKB19H2InstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Count"
},
"EKB19H2InstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\2",
"ValueName": "Timestamp"
},
"EKB19H2UnInstallCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Count"
},
"EKB19H2UnInstallTimeEpoch": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Setup\\FeatureStaging\\20455539\\0",
"ValueName": "Timestamp"
},
"EnableWUfBUpgradeGatesRS5": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\502505fe-762c-4e80-911e-0c3fa4c63fb0",
"ValueName": "DataRequireGatedScanForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"ESETInstalledKey": {
"FullPath": "SOFTWARE\\ESET\\ESET Security",
"IfExists": true
},
"ESETInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESET\\ESET Security",
"IfExists": true
},
"EsetReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\ehdrv\\Parameters",
"ValueName": "WindowsCompatibilityLevel",
"RegValueType": "REG_DWORD"
},
"ESTSecurityInstalledKey": {
"FullPath": "SOFTWARE\\ESTsoft",
"IfExists": true
},
"ESTSecurityInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\ESTsoft",
"IfExists": true
},
"FeatureUpdateDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\",
"ValueName": "ConfigureDeadlineForFeatureUpdates",
"RegValueType": "REG_DWORD"
},
"FlightContent": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "ContentType",
"RegValueType": "REG_SZ"
},
"FSecureInstalledKey": {
"FullPath": "SOFTWARE\\F-Secure\\OneClient",
"IfExists": true
},
"FSecureInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\F-Secure\\OneClient",
"IfExists": true
},
"FSRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Applicability",
"ValueName": "FSRing",
"RegValueType": "REG_SZ"
},
"GamingServicesInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\GamingServices",
"IfExists": true
},
"GStatus_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "GStatus",
"RegValueType": "REG_SZ"
},
"GStatusBlockIDs_All": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Appraiser\\GWX",
"ValueName": "SdbEntries",
"RegValueType": "REG_SZ"
},
"HidOverGattReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemRoot%/System32/drivers/UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll",
"ValueName": "Source",
"RegValueType": "REG_SZ"
},
"HotPatchEKBInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo\\DynamicInstalled\\Hotpatch.amd64",
"IfExists": true
},
"InstallDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "InstallDate",
"RegValueType": "REG_DWORD"
},
"IntelPlatformId": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0",
"ValueName": "Platform Specific Field 1",
"RegValueType": "REG_DWORD"
},
"IsAutopilotRegistered": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Provisioning\\AutopilotPolicyCache",
"ValueName": "ProfileAvailable",
"RegValueType": "REG_DWORD"
},
"IsFlightingEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\Applicability",
"ValueName": "IsBuildFlightingEnabled",
"RegValueType": "REG_DWORD"
},
"IsCHCapableBuild": {
"HKey": "HKEY_CLASSES_ROOT",
"FullPath": "CLSID\\{2C57C51B-FD43-4E74-B077-551AE6228AD6}",
"IfExists": true
},
"IsCldFltSyncRoots": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SyncRootManager\\*",
"IfExists": true
},
"IsConfigMgrEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfHost\\ClientState",
"ValueName": "ConfigMgrEnabled",
"RegValueType": "REG_DWORD"
},
"IsContainerMgrInstalled": {
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Containers\\CmService",
"IfExists": true
},
"IsEdgeWithChromiumInstalled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsEdgeWithChromiumInstalledWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Wow6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"IsFeedbackHubSelfhost": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Diagnostics\\DiagTrack\\Partners\\IsFeedbackHubSelfhost",
"IfExists": true
},
"IsHybridOrXGpu": {
"FullPath": "SOFTWARE\\Microsoft\\DirectX",
"ValueName": "HybridDeviceApplicableForDxDbGpuPreferences"
},
"IsWDAGEnabled": {
"FullPath": "SYSTEM\\ControlSet001\\Services\\hvsics",
"IfExists": true
},
"IsWDATPEnabled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows Advanced Threat Protection\\Status",
"ValueName": "OnboardingState"
},
"K7InstalledKey": {
"FullPath": "SOFTWARE\\K7 Computing",
"IfExists": true
},
"K7InstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\K7 Computing",
"IfExists": true
},
"KasperskyInstalledKey": {
"FullPath": "SOFTWARE\\KasperskyLab",
"IfExists": true
},
"KasperskyInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\KasperskyLab",
"IfExists": true
},
"KasperskyReg": {
"FullPath": "System\\CurrentControlSet\\Services\\klhk\\Parameters",
"ValueName": "UseVtHardware"
},
"KingsoftInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KingsoftInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Kingsoft Internet Security",
"IfExists": true
},
"KioskMode": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\AssignedAccessCsp\\AutoLogonAccount",
"ValueName": "ConfigSource",
"RegValueType": "REG_DWORD"
},
"LCUVer": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "LCUVer"
},
"LenovoInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"LenovoInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A9861883-31C5-4324-BD9A-DC9527EEB675}_is1",
"IfExists": true
},
"MalwarebytesInstalledKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"MalwarebytesInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1",
"IfExists": true
},
"McAfeeInstalledKey": {
"FullPath": "SOFTWARE\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"McAfeeInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\McAfee\\MSC\\AppInfo\\Substitute\\QueryParams",
"IfExists": true
},
"MTPTargetingInfo": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\MTPTargetingInfo",
"ValueName": "TargetRing"
},
"OEMModelBaseBoard": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "BaseBoardProduct",
"RegValueType": "REG_SZ"
},
"OemPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SYSTEM\\Platform\\DeviceTargetingInfo",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OEMSubModel": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "HARDWARE\\DESCRIPTION\\System\\BIOS",
"ValueName": "SystemSKU",
"RegValueType": "REG_SZ"
},
"OobeSeeker": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates",
"ValueName": "OOBEUpdateStarted"
},
"OSDataDriverPartnerRing": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "OSData\\SOFTWARE\\Microsoft\\DriverFlighting\\Partner",
"ValueName": "TargetRing",
"RegValueType": "REG_SZ"
},
"OSRollbackBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "BuildString",
"RegValueType": "REG_SZ"
},
"OSRollbackCount": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "Count",
"RegValueType": "REG_DWORD"
},
"OSRollbackDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\OSUpgrade\\Rollback",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"PandaInstalledKey": {
"FullPath": "SOFTWARE\\Panda Software\\Setup",
"IfExists": true
},
"PandaInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Panda Software\\Setup",
"IfExists": true
},
"PausedFeatureStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedFeatureStatus"
},
"PausedQualityStatus": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UpdatePolicy\\Settings",
"ValueName": "PausedQualityStatus"
},
"PlayFabPartyRelay": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PlayFabPartyRelay",
"IfExists": true
},
"PonchAllow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc",
"RegValueType": "REG_DWORD"
},
"PonchAllowKey": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchAllowWow": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "cadca5fe-87d3-4b96-b7fb-a231484277cc"
},
"PonchAllowWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\QualityCompat\\cadca5fe-87d3-4b96-b7fb-a231484277cc",
"IfExists": true
},
"PonchBlock": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\QualityCompat",
"ValueName": "65d75b03-6f4d-46e9-b870-517731e06cf9",
"RegValueType": "REG_DWORD"
},
"PreviewBuildsManagerEnabled": {
"FullPath": "SOFTWARE\\Microsoft\\WindowsSelfhost\\Manager",
"ValueName": "ArePreviewBuildsAllowed"
},
"QihooInstalledKey": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\360TotalSecurity",
"IfExists": true
},
"QUDeadline": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QUDeadlineMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "ConfigureDeadlineForQualityUpdates",
"RegValueType": "REG_DWORD"
},
"QuickhealInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Servicescatflt",
"IfExists": true
},
"QuickhealInstalledKey2": {
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\scanner.exe",
"IfExists": true
},
"RecoveredFromBuild": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "LastBuild",
"RegValueType": "REG_DWORD"
},
"RecoveredOnDate": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\WindowsSelfHost\\Applicability\\RecoveredFrom",
"ValueName": "DateStamp",
"RegValueType": "REG_DWORD"
},
"ReleaseType": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Update\\TargetingInfo",
"ValueName": "ReleaseType",
"RegValueType": "REG_SZ"
},
"SetupDisplayedEulaVersion": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\OOBE\\",
"ValueName": "SetupDisplayedEulaVersion",
"RegValueType": "REG_DWORD"
},
"SH_SIPolicyCleanup": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PPI\\Settings",
"ValueName": "SIPolicyCleanup",
"RegValueType": "REG_DWORD"
},
"SmartActiveHoursState": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SmartActiveHoursState",
"RegValueType": "REG_DWORD"
},
"SophosInstalledKey1": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\SAVService",
"IfExists": true
},
"SophosInstalledKey2": {
"FullPath": "SYSTEM\\CurrentControlSet\\Services\\hmpalertsvc",
"IfExists": true
},
"StayOnWindows10Timestamp": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
"ValueName": "SvOfferDeclined",
"RegValueType": "REG_QWORD"
},
"Steam": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Classes\\Steam",
"ValueName": "",
"RegValueType": "REG_SZ"
},
"StrictHiveSecurityReg": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\*",
"ValueName": "StrictHiveSecuritySet"
},
"SymantecInstalledKey": {
"FullPath": "SOFTWARE\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"SymantecInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Norton\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}",
"IfExists": true
},
"TargetReleaseVersionGP": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "TargetReleaseVersionInfo",
"RegValueType": "REG_SZ"
},
"TargetReleaseVersionMDM": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\PolicyManager\\current\\device\\Update",
"ValueName": "TargetReleaseVersion",
"RegValueType": "REG_SZ"
},
"TencentInstalledKey": {
"FullPath": "SOFTWARE\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\Tencent\\QQPCMgr",
"IfExists": true
},
"TencentReg": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "LoadStartTime"
},
"TencentType": {
"FullPath": "SYSTEM\\CurrentControlSet\\services\\TesSafe",
"ValueName": "Type"
},
"ThreatTrackInstalledKey": {
"FullPath": "SOFTWARE\\SBAMSvc",
"IfExists": true
},
"ThreatTrackInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\SBAMSvc",
"IfExists": true
},
"TimestampEpochString_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "TimestampEpochString",
"RegValueType": "REG_SZ"
},
"TrendInstalledKey": {
"FullPath": "SOFTWARE\\TrendMicro",
"IfExists": true
},
"TrendInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\TrendMicro",
"IfExists": true
},
"UHSEnrolled": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"ValueName": "UHSEnrolled",
"RegValueType": "REG_SZ",
"IfExists": true
},
"UninstallActive": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "System\\Setup",
"ValueName": "UninstallActive",
"RegValueType": "REG_DWORD"
},
"UpdateOfferedDays": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WaaSAssessment\\Cache\\",
"ValueName": "UpToDateDays",
"RegValueType": "REG_DWORD"
},
"UpdatePreference": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
"ValueName": "UpdatePreference",
"RegValueType": "REG_DWORD"
},
"UpgEx_CO21H2RegFb": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\TargetVersionUpgradeExperienceIndicators\\CO21H2",
"ValueName": "UpgEx",
"RegValueType": "REG_SZ"
},
"UpgradeAccepted": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\OOBE\\Updates\\",
"ValueName": "UpgradeAccepted",
"RegValueType": "REG_DWORD"
},
"UpgradeEligible": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion",
"ValueName": "UpgradeEligible",
"RegValueType": "REG_DWORD"
},
"UsoScanMitigation": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Orchestrator\\Mitigation\\",
"ValueName": "UsoScanNotStartingMitigationCompleted",
"RegValueType": "REG_DWORD",
"IfExists": true
},
"WebExperience": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebExperienceWow": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}",
"IfExists": true
},
"WebrootInstalledKey": {
"FullPath": "SOFTWARE\\WRData",
"IfExists": true
},
"WebrootInstalledWowKey": {
"FullPath": "SOFTWARE\\WOW6432Node\\WRData",
"IfExists": true
},
"WindowsMixedReality": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\WUDF\\Services\\HoloLensSensors",
"ValueName": "WdfMajorVersion",
"RegValueType": "REG_DWORD"
},
"WSX_Windows_Settings_Account": {
"HKey": "HKEY_LOCAL_MACHINE",
"FullPath": "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSX\\WSXPacks\\CTAC",
"ValueName": "Windows.Settings.Account",
"RegValueType": "REG_SZ"
}
},
"FileInfo": {
"AvastVer": {
"Path": "\\system32\\Drivers\\aswVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"AvgVer": {
"Path": "\\system32\\Drivers\\avgVmm.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"BullguardInstalledVer": {
"Path": "\\BullGuard Ltd\\BullGuard\\BullGuard.exe",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVer": {
"Path": "\\WindowsApps\\Microsoft.549981C3F5F10_8wekyb3d8bbwe\\CortanaApp.View.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CortanaAppVerTest": {
"Path": "\\WindowsApps\\3242f7d9-db60-4380-a379-4205ea768bfc_1.0.0.0_x64__zs4v8rx04ex0m\\UndockingTestApp.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"CrowdStrikeInstalledVer": {
"Path": "drivers\\CrowdStrike\\CSAgent.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"EsetVer": {
"Path": "\\drivers\\ehdrv.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"GDataInstalledVer": {
"Path": "\\drivers\\MiniIcpt.sys",
"IfExists": true,
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"IsNotepadExePresent": {
"Path": "%windir%\\system32\\notepad.exe",
"IfExists": true
},
"K7InstalledVer": {
"Path": "\\K7 Computing",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"KasperskyVer": {
"Path": "\\system32\\Drivers\\klhk.sys",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
},
"PandaInstalledVer": {
"Path": "\\Panda Security",
"IfExists": true,
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"SkypeRoomSystem": {
"Path": "%systemdrive%\\Recovery\\OEM\\$oem$\\$1\\Rigel\\x64\\Scripts\\Provisioning\\AutoUnattend.xml",
"IfExists": true
},
"SymantecVer": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"SymantecVer64": {
"Path": "\\Symantec\\Shared\\EENGINE\\eeCtrl64.sys",
"FolderGuid": "{DE974D24-D9C6-4D3E-BF91-F4455120B917}"
},
"TobiiVer": {
"Path": "\\Tobii\\Tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TobiiVer1x86": {
"Path": "\\Tobii\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TobiiVerx86": {
"Path": "\\tobii EyeX Interaction\\Tobii.EyeX.Interaction.exe",
"FolderGuid": "{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}"
},
"TrendInstalledVer": {
"Path": "\\Trend Micro\\Titanium\\plugin\\plugVizor.dll",
"IfExists": true,
"FolderGuid": "{905E63B6-C1BF-494E-B29C-65B732D3D21A}"
},
"TrendMicroVer": {
"Path": "\\drivers\\TMUMH.sys",
"FolderGuid": "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}"
},
"WuClientVer": {
"Path": "\\system32\\wuaueng.dll",
"FolderGuid": "{F38BF404-1D43-42F2-9305-67DE0B28FC23}"
}
},
"Licensing": {
"UpdateManagementGroup": {
"Name": "UpdatePolicy-UpdateManagementGroup"
}
},
"UpdatePolicy": {
"BranchReadinessLevel": {
"PolicyEnum": 5,
"Enterprise": true
},
"BranchReadinessLevelSource": {
"PolicyEnum": 5,
"Enterprise": true,
"UseSource": true
},
"DeferFeatureUpdatePeriodInDays": {
"PolicyEnum": 9,
"Enterprise": true
},
"DeferQualityUpdatePeriodInDays": {
"PolicyEnum": 7,
"Enterprise": true
},
"DisableDualScan": {
"PolicyEnum": 42,
"Enterprise": true
},
"EnableWUfBUpgradeGates": {
"PolicyEnum": 51,
"Enterprise": true
},
"TargetProductVersion": {
"PolicyEnum": 53,
"Enterprise": true
},
"TargetReleaseVersion": {
"PolicyEnum": 50,
"Enterprise": true
},
"UpdateServiceUrl": {
"PolicyEnum": 12
}
},
"Policy": {
"DesiredOcpVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OcpVersion/"
},
"DesiredOsVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/OsVersion"
},
"DesiredSystemManifestVersion": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/DesiredUpdates/SystemManifestVersion"
},
"DSS_Enrolled": {
"Area": "Update",
"Name": "EnableWUfBCloud"
},
"DucCustomPackageId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/CustomPackageId"
},
"DucDeviceModelId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/DeviceModelId"
},
"DucOemPartnerRing": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/OemPartnerRing"
},
"DucPublisherId": {
"LocUri": "./Device/Vendor/MSFT/DeviceUpdateCenter/Enrollment/PublisherId"
},
"SetPolicyDrivenUpdateSourceForFeatureUpdates": {
"LocUri": "./Device/Vendor/MSFT/Policy/Config/Update/SetPolicyDrivenUpdateSourceForFeatureUpdates"
}
},
"WMI": {
"FirstStorageSpaceDeviceId": {
"Query": "SELECT DeviceID FROM Win32_DiskDrive WHERE Model = 'Microsoft Storage Space Device'",
"Name": "DeviceID",
"Timeout": 2000
}
}
}"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl]
"Path"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl]
"Path.Org"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl]
"Path.Win32"="C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\eeCtrl]
"DisplayName"="Symantec Eraser Control driver"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv]
"Path"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv]
"Path.Org"="\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EraserUtilRebootDrv]
"Path.Win32"="C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SRTSP]
"DisplayName"="Symantec Real Time Storage Protection x64"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SRTSPX]
"DisplayName"="Symantec Real Time Storage Protection (PEL) x64"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymEFASI]
"DisplayName"="Symantec Extended File Attributes (SI)"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymELAM]
"DisplayName"="Symantec ELAM Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymIRON]
"DisplayName"="Symantec Iron Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\SymNetS]
"DisplayName"="Symantec Network Security WFP Driver"

[HKEY_USERS\S-1-5-21-3911643055-33977892-3237656246-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"Symantec.Norton Security"="128"


====== Fin de Chercher ======