Just had to find the operating system of a remote computer so I copied the C:\Windows\System32\config\software.sav (the software hive file is locked by the OS so used the .sav instead) file to Ubuntu 2024 Linux and used hivexget to read the "ProductName"
sudo apt-get install libhivex-bin
hivexget ./software.sav 'Microsoft\Windows NT\CurrentVersion'
hivexget ./software.sav 'Microsoft\Windows NT\CurrentVersion'
"SubVersionNumber"=""
"CurrentBuild"="1.511.1 () (Obsolete data - do not use)"
"InstallDate"=dword:00000000
"ProductName"="Microsoft Windows XP"
"RegDone"=""
"RegisteredOrganization"=""
"RegisteredOwner"=""
"SoftwareType"="System"
0 Comments