CurrentVersion Registry Key

The CurrentVersion registry key will provide you with the current operating system's version, service pack, and date of installation.

Analysis Value

🖥️System Enumeration

Operating System Availability

Major Version
Support
Major Version
Support

Windows 11

✅

Server 2019

✅

Windows 10

✅

Server 2016

✅

Windows 8

✅

Server 2012

✅

Windows 7

✅

Server 2008

✅

Windows Vista

✅

Server 2003

✅

Windows XP

✅

Artifact Location(s)

  • File: %SystemRoot%\System32\config\SOFTWARE

  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion

Artifact Parsers

  • RegistryExplorer (Eric Zimmerman)

Artifact Interpretation

The ProductName value will provide the OS, such as Windows Server 2019.

The ReleaseId value will provide the version of the specified OS.

The InstallDate is an Epoch timestamp of when the OS was either first installed or received a major update, or was reset.

Example

This example was produced on Windows 10, Version 10.0.19044 Build 19044

Last updated