CurrentVersion Registry Key
The CurrentVersion
registry key will provide you with the current operating system's version, service pack, and date of installation.
Analysis Value
🖥️pageSystem EnumerationOperating System Availability
Major Version | Support | Major Version | Support |
---|---|---|---|
Windows 11 | ✅ | Server 2019 | ✅ |
Windows 10 | ✅ | Server 2016 | ✅ |
Windows 8 | ✅ | Server 2012 | ✅ |
Windows 7 | ✅ | Server 2008 | ✅ |
Windows Vista | ✅ | Server 2003 | ✅ |
Windows XP | ✅ |
Artifact Location(s)
File:
%SystemRoot%\System32\config\SOFTWARE
Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion
Artifact Parsers
RegistryExplorer (Eric Zimmerman)
Artifact Interpretation
The ProductName
value will provide the OS, such as Windows Server 2019
.
The ReleaseId
value will provide the version of the specified OS.
The InstallDate
is an Epoch timestamp of when the OS was either first installed or received a major update, or was reset.
Example
This example was produced on Windows 10, Version 10.0.19044 Build 19044
Last updated