content: [commands]
    [commands.9284c9826a5efc69fce7987897de68dc041d8cb0d16cf2b09893e4aebd196afb]
      command = "powershell.exe -NoProfile -EncodedCommand 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"
      stdout = "{\r\n    \"ProjectID\":  \"mondoo-dev-262313\",\r\n    \"InstanceID\":  5275377306317132843,\r\n    \"InstanceName\":  \"instance-name\",\r\n    \"ZoneInfo\":  \"projects/458067389847/zones/us-central1-a\"\r\n}\r\n"
      exit_status = 0
    [commands.7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682]
      command = "hostname"
      stdout = "jay-win-1\r\n"
      exit_status = 0
    [commands.7ce30b85e14a034d16c5c90a783f09e0533e1fdf0369223c97c93913ccf1586a]
      command = "wmic os get * /format:csv"
      stdout = "\r\r\nNode,BootDevice,BuildNumber,BuildType,Caption,CodeSet,CountryCode,CreationClassName,CSCreationClassName,CSDVersion,CSName,CurrentTimeZone,DataExecutionPrevention_32BitApplications,DataExecutionPrevention_Available,DataExecutionPrevention_Drivers,DataExecutionPrevention_SupportPolicy,Debug,Description,Distributed,EncryptionLevel,ForegroundApplicationBoost,FreePhysicalMemory,FreeSpaceInPagingFiles,FreeVirtualMemory,InstallDate,LargeSystemCache,LastBootUpTime,LocalDateTime,Locale,Manufacturer,MaxNumberOfProcesses,MaxProcessMemorySize,MUILanguages,Name,NumberOfLicensedUsers,NumberOfProcesses,NumberOfUsers,OperatingSystemSKU,Organization,OSArchitecture,OSLanguage,OSProductSuite,OSType,OtherTypeDescription,PAEEnabled,PlusProductID,PlusVersionNumber,PortableOperatingSystem,Primary,ProductType,RegisteredUser,SerialNumber,ServicePackMajorVersion,ServicePackMinorVersion,SizeStoredInPagingFiles,Status,SuiteMask,SystemDevice,SystemDirectory,SystemDrive,TotalSwapSpaceSize,TotalVirtualMemorySize,TotalVisibleMemorySize,Version,WindowsDirectory\r\r\nJAY-WIN-1,\\Device\\HarddiskVolume2,17763,Multiprocessor Free,Microsoft Windows Server 2019 Datacenter,1252,1,Win32_OperatingSystem,Win32_ComputerSystem,,JAY-WIN-1,0,TRUE,TRUE,TRUE,3,FALSE,,FALSE,256,2,2070364,895392,3046792,20211123175942.000000+000,,20211123175710.499265+000,20211123182628.981000+000,0409,Microsoft Corporation,4294967295,137438953344,{en-US},Microsoft Windows Server 2019 Datacenter|C:\\Windows|\\Device\\Harddisk0\\Partition3,0,115,2,8,,64-bit,1033,400,18,,,,,FALSE,TRUE,3,,00430-00000-00000-AA266,0,0,1048576,OK,400,\\Device\\HarddiskVolume3,C:\\Windows\\system32,C:,,5239152,4190576,10.0.17763,C:\\Windows\r\r\n"
      exit_status = 0
    [commands.e76ca74af8f43c08ea7e3986d859c3805b6497bb33f022ac2da9655a3fe5a2e0]
      command = "powershell -c \"Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name CurrentBuild, UBR, EditionID | ConvertTo-Json\""
      stdout = "{\r\n    \"CurrentBuild\":  \"17763\",\r\n    \"UBR\":  2300,\r\n    \"EditionID\":  \"ServerDatacenter\",\r\n    \"PSPath\":  \"Microsoft.PowerShell.Core\\\\Registry::HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\",\r\n    \"PSParentPath\":  \"Microsoft.PowerShell.Core\\\\Registry::HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows NT\",\r\n    \"PSChildName\":  \"CurrentVersion\",\r\n    \"PSDrive\":  {\r\n                    \"CurrentLocation\":  \"\",\r\n                    \"Name\":  \"HKLM\",\r\n                    \"Provider\":  {\r\n                                     \"ImplementingType\":  \"Microsoft.PowerShell.Commands.RegistryProvider\",\r\n                                     \"HelpFile\":  \"System.Management.Automation.dll-Help.xml\",\r\n                                     \"Name\":  \"Registry\",\r\n                                     \"PSSnapIn\":  \"Microsoft.PowerShell.Core\",\r\n                                     \"ModuleName\":  \"Microsoft.PowerShell.Core\",\r\n                                     \"Module\":  null,\r\n                                     \"Description\":  \"\",\r\n                                     \"Capabilities\":  80,\r\n                                     \"Home\":  \"\",\r\n                                     \"Drives\":  \"HKLM HKCU\"\r\n                                 },\r\n                    \"Root\":  \"HKEY_LOCAL_MACHINE\",\r\n                    \"Description\":  \"The configuration settings for the local computer\",\r\n                    \"MaximumSize\":  null,\r\n                    \"Credential\":  {\r\n                                       \"UserName\":  null,\r\n                                       \"Password\":  null\r\n                                   },\r\n                    \"DisplayRoot\":  null\r\n                },\r\n    \"PSProvider\":  {\r\n                       \"ImplementingType\":  {\r\n                                                \"Module\":  \"System.Management.Automation.dll\",\r\n                                                \"Assembly\":  \"System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35\",\r\n                                                \"TypeHandle\":  \"System.RuntimeTypeHandle\",\r\n                                                \"DeclaringMethod\":  null,\r\n                                                \"BaseType\":  \"System.Management.Automation.Provider.NavigationCmdletProvider\",\r\n                                                \"UnderlyingSystemType\":  \"Microsoft.PowerShell.Commands.RegistryProvider\",\r\n                                                \"FullName\":  \"Microsoft.PowerShell.Commands.RegistryProvider\",\r\n                                                \"AssemblyQualifiedName\":  \"Microsoft.PowerShell.Commands.RegistryProvider, System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35\",\r\n                                                \"Namespace\":  \"Microsoft.PowerShell.Commands\",\r\n                                                \"GUID\":  \"73bf32d8-72d5-30bf-ba65-7d5b72919e2f\",\r\n                                                \"IsEnum\":  false,\r\n                                                \"GenericParameterAttributes\":  null,\r\n                                                \"IsSecurityCritical\":  true,\r\n                                                \"IsSecuritySafeCritical\":  false,\r\n                                                \"IsSecurityTransparent\":  false,\r\n                                                \"IsGenericTypeDefinition\":  false,\r\n                                                \"IsGenericParameter\":  false,\r\n                                                \"GenericParameterPosition\":  null,\r\n                                                \"IsGenericType\":  false,\r\n                                                \"IsConstructedGenericType\":  false,\r\n                                                \"ContainsGenericParameters\":  false,\r\n                                                \"StructLayoutAttribute\":  \"System.Runtime.InteropServices.StructLayoutAttribute\",\r\n                                                \"Name\":  \"RegistryProvider\",\r\n                                                \"MemberType\":  32,\r\n                                                \"DeclaringType\":  null,\r\n                                                \"ReflectedType\":  null,\r\n                                                \"MetadataToken\":  33554705,\r\n                                                \"GenericTypeParameters\":  \"\",\r\n                                                \"DeclaredConstructors\":  \"Void .ctor() Void .cctor()\",\r\n                                                \"DeclaredEvents\":  \"\",\r\n                                                \"DeclaredFields\":  \"System.Management.Automation.PSTraceSource tracer System.String[] hiveNames System.String[] hiveShortNames Microsoft.Win32.RegistryKey[] wellKnownHives Microsoft.PowerShell.Commands.Internal.TransactedRegistryKey[] wellKnownHivesTx System.String ProviderName System.String charactersThatNeedEscaping\",\r\n                                                \"DeclaredMembers\":  \"System.Management.Automation.PSDriveInfo NewDrive(System.Management.Automation.PSDriveInfo) Void GetItem(System.String) System.Object SetItemDynamicParameters(System.String, System.Object) Void GetChildNames(System.String, System.Management.Automation.ReturnContainers) Boolean ItemExists(System.String) Boolean HasChildItems(System.String) Boolean IsItemContainer(System.String) Void MoveRegistryItem(System.String, System.String) System.Object SetPropertyDynamicParameters(System.String, System.Management.Automation.PSObject) System.Object GetPropertyDynamicParameters(System.String, System.Collections.ObjectModel.Collection`1[System.String]) System.Object ClearPropertyDynamicParameters(System.String, System.Collections.ObjectModel.Collection`1[System.String]) System.String GetParentPath(System.String, System.String) System.String GetChildName(System.String) System.Object NewPropertyDynamicParameters(System.String, System.String, System.String, System.Object) System.Object RemovePropertyDynamicParameters(System.String, System.String) System.Object RenamePropertyDynamicParameters(System.String, System.String, System.String) System.Object CopyPropertyDynamicParameters(System.String, System.String, System.String, System.String) System.Object MovePropertyDynamicParameters(System.String, System.String, System.String, System.String) Void CopyProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String, Boolean) Void MoveProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String) System.String NormalizePath(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetHiveRoot(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetRegkeyForPathWriteIfError(System.String, Boolean) Void SetRegistryValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.Object, Microsoft.Win32.RegistryValueKind, System.String) Void SetRegistryValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.Object, Microsoft.Win32.RegistryValueKind, System.String, Boolean) Microsoft.Win32.RegistryValueKind GetValueKindForProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) System.Object ReadExistingKeyValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Void GetSecurityDescriptor(System.String, System.Security.AccessControl.AccessControlSections) Void SetSecurityDescriptor(System.String, System.Security.AccessControl.ObjectSecurity) System.Security.AccessControl.ObjectSecurity NewSecurityDescriptorFromPath(System.String, System.Security.AccessControl.AccessControlSections) System.Security.AccessControl.ObjectSecurity NewSecurityDescriptorOfType(System.String, System.Security.AccessControl.AccessControlSections) System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSDriveInfo] InitializeDefaultDrives() Boolean IsValidPath(System.String) Void SetItem(System.String, System.Object) Void ClearItem(System.String) Void GetChildItems(System.String, Boolean, UInt32) System.String EscapeSpecialChars(System.String) System.String EscapeChildName(System.String) Void RenameItem(System.String, System.String) Void NewItem(System.String, System.String, System.Object) Void RemoveItem(System.String, Boolean) Void CopyItem(System.String, System.String, Boolean) Boolean CopyRegistryKey(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String, Boolean, Boolean, Boolean) Boolean ErrorIfDestinationIsSourceOrChildOfSource(System.String, System.String) Void MoveItem(System.String, System.String) Void GetProperty(System.String, System.Collections.ObjectModel.Collection`1[System.String]) Void SetProperty(System.String, System.Management.Automation.PSObject) Void ClearProperty(System.String, System.Collections.ObjectModel.Collection`1[System.String]) Void NewProperty(System.String, System.String, System.String, System.Object) Void RemoveProperty(System.String, System.String) Void RenameProperty(System.String, System.String, System.String) Void CopyProperty(System.String, System.String, System.String, System.String) Void MoveProperty(System.String, System.String, System.String, System.String) System.String EnsureDriveIsRooted(System.String) Boolean HasRelativePathTokens(System.String) Void GetFilteredRegistryKeyProperties(System.String, System.Collections.ObjectModel.Collection`1[System.String], Boolean, Boolean, Microsoft.PowerShell.Commands.IRegistryWrapper ByRef, System.Collections.ObjectModel.Collection`1[System.String] ByRef) Void WriteErrorIfPerfectMatchNotFound(Boolean, System.String, System.String) System.Object ResetRegistryKeyValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Boolean IsHiveContainer(System.String) Boolean CheckOperationNotAllowedOnHiveContainer(System.String) Boolean CheckOperationNotAllowedOnHiveContainer(System.String, System.String) Boolean CreateIntermediateKeys(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetRegkeyForPath(System.String, Boolean) Void WriteWrappedPropertyObject(System.Object, System.String, System.String) System.Object ConvertValueToKind(System.Object, Microsoft.Win32.RegistryValueKind) Microsoft.Win32.RegistryValueKind GetValueKindFromObject(System.Object) Void WriteRegistryItemObject(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Boolean ParseKind(System.String, Microsoft.Win32.RegistryValueKind ByRef) System.String GetLocalizedDefaultToken() System.String GetPropertyName(System.String) Void .ctor() Void .cctor() System.Management.Automation.PSTraceSource tracer System.String[] hiveNames System.String[] hiveShortNames Microsoft.Win32.RegistryKey[] wellKnownHives Microsoft.PowerShell.Commands.Internal.TransactedRegistryKey[] wellKnownHivesTx System.String ProviderName System.String charactersThatNeedEscaping\",\r\n                                                \"DeclaredMethods\":  \"System.Management.Automation.PSDriveInfo NewDrive(System.Management.Automation.PSDriveInfo) Void GetItem(System.String) System.Object SetItemDynamicParameters(System.String, System.Object) Void GetChildNames(System.String, System.Management.Automation.ReturnContainers) Boolean ItemExists(System.String) Boolean HasChildItems(System.String) Boolean IsItemContainer(System.String) Void MoveRegistryItem(System.String, System.String) System.Object SetPropertyDynamicParameters(System.String, System.Management.Automation.PSObject) System.Object GetPropertyDynamicParameters(System.String, System.Collections.ObjectModel.Collection`1[System.String]) System.Object ClearPropertyDynamicParameters(System.String, System.Collections.ObjectModel.Collection`1[System.String]) System.String GetParentPath(System.String, System.String) System.String GetChildName(System.String) System.Object NewPropertyDynamicParameters(System.String, System.String, System.String, System.Object) System.Object RemovePropertyDynamicParameters(System.String, System.String) System.Object RenamePropertyDynamicParameters(System.String, System.String, System.String) System.Object CopyPropertyDynamicParameters(System.String, System.String, System.String, System.String) System.Object MovePropertyDynamicParameters(System.String, System.String, System.String, System.String) Void CopyProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String, Boolean) Void MoveProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String) System.String NormalizePath(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetHiveRoot(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetRegkeyForPathWriteIfError(System.String, Boolean) Void SetRegistryValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.Object, Microsoft.Win32.RegistryValueKind, System.String) Void SetRegistryValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.Object, Microsoft.Win32.RegistryValueKind, System.String, Boolean) Microsoft.Win32.RegistryValueKind GetValueKindForProperty(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) System.Object ReadExistingKeyValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Void GetSecurityDescriptor(System.String, System.Security.AccessControl.AccessControlSections) Void SetSecurityDescriptor(System.String, System.Security.AccessControl.ObjectSecurity) System.Security.AccessControl.ObjectSecurity NewSecurityDescriptorFromPath(System.String, System.Security.AccessControl.AccessControlSections) System.Security.AccessControl.ObjectSecurity NewSecurityDescriptorOfType(System.String, System.Security.AccessControl.AccessControlSections) System.Collections.ObjectModel.Collection`1[System.Management.Automation.PSDriveInfo] InitializeDefaultDrives() Boolean IsValidPath(System.String) Void SetItem(System.String, System.Object) Void ClearItem(System.String) Void GetChildItems(System.String, Boolean, UInt32) System.String EscapeSpecialChars(System.String) System.String EscapeChildName(System.String) Void RenameItem(System.String, System.String) Void NewItem(System.String, System.String, System.Object) Void RemoveItem(System.String, Boolean) Void CopyItem(System.String, System.String, Boolean) Boolean CopyRegistryKey(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String, System.String, Boolean, Boolean, Boolean) Boolean ErrorIfDestinationIsSourceOrChildOfSource(System.String, System.String) Void MoveItem(System.String, System.String) Void GetProperty(System.String, System.Collections.ObjectModel.Collection`1[System.String]) Void SetProperty(System.String, System.Management.Automation.PSObject) Void ClearProperty(System.String, System.Collections.ObjectModel.Collection`1[System.String]) Void NewProperty(System.String, System.String, System.String, System.Object) Void RemoveProperty(System.String, System.String) Void RenameProperty(System.String, System.String, System.String) Void CopyProperty(System.String, System.String, System.String, System.String) Void MoveProperty(System.String, System.String, System.String, System.String) System.String EnsureDriveIsRooted(System.String) Boolean HasRelativePathTokens(System.String) Void GetFilteredRegistryKeyProperties(System.String, System.Collections.ObjectModel.Collection`1[System.String], Boolean, Boolean, Microsoft.PowerShell.Commands.IRegistryWrapper ByRef, System.Collections.ObjectModel.Collection`1[System.String] ByRef) Void WriteErrorIfPerfectMatchNotFound(Boolean, System.String, System.String) System.Object ResetRegistryKeyValue(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Boolean IsHiveContainer(System.String) Boolean CheckOperationNotAllowedOnHiveContainer(System.String) Boolean CheckOperationNotAllowedOnHiveContainer(System.String, System.String) Boolean CreateIntermediateKeys(System.String) Microsoft.PowerShell.Commands.IRegistryWrapper GetRegkeyForPath(System.String, Boolean) Void WriteWrappedPropertyObject(System.Object, System.String, System.String) System.Object ConvertValueToKind(System.Object, Microsoft.Win32.RegistryValueKind) Microsoft.Win32.RegistryValueKind GetValueKindFromObject(System.Object) Void WriteRegistryItemObject(Microsoft.PowerShell.Commands.IRegistryWrapper, System.String) Boolean ParseKind(System.String, Microsoft.Win32.RegistryValueKind ByRef) System.String GetLocalizedDefaultToken() System.String GetPropertyName(System.String)\",\r\n                                                \"DeclaredNestedTypes\":  \"\",\r\n                                                \"DeclaredProperties\":  \"\",\r\n                                                \"ImplementedInterfaces\":  \"System.Management.Automation.IResourceSupplier System.Management.Automation.Provider.IPropertyCmdletProvider System.Management.Automation.Provider.IDynamicPropertyCmdletProvider System.Management.Automation.Provider.ISecurityDescriptorCmdletProvider\",\r\n                                                \"TypeInitializer\":  \"Void .cctor()\",\r\n                                                \"IsNested\":  false,\r\n                                                \"Attributes\":  1048833,\r\n                                                \"IsVisible\":  true,\r\n                                                \"IsNotPublic\":  false,\r\n                                                \"IsPublic\":  true,\r\n                                                \"IsNestedPublic\":  false,\r\n                                                \"IsNestedPrivate\":  false,\r\n                                                \"IsNestedFamily\":  false,\r\n                                                \"IsNestedAssembly\":  false,\r\n                                                \"IsNestedFamANDAssem\":  false,\r\n                                                \"IsNestedFamORAssem\":  false,\r\n                                                \"IsAutoLayout\":  true,\r\n                                                \"IsLayoutSequential\":  false,\r\n                                                \"IsExplicitLayout\":  false,\r\n                                                \"IsClass\":  true,\r\n                                                \"IsInterface\":  false,\r\n                                                \"IsValueType\":  false,\r\n                                                \"IsAbstract\":  false,\r\n                                                \"IsSealed\":  true,\r\n                                                \"IsSpecialName\":  false,\r\n                                                \"IsImport\":  false,\r\n                                                \"IsSerializable\":  false,\r\n                                                \"IsAnsiClass\":  true,\r\n                                                \"IsUnicodeClass\":  false,\r\n                                                \"IsAutoClass\":  false,\r\n                                                \"IsArray\":  false,\r\n                                                \"IsByRef\":  false,\r\n                                                \"IsPointer\":  false,\r\n                                                \"IsPrimitive\":  false,\r\n                                                \"IsCOMObject\":  false,\r\n                                                \"HasElementType\":  false,\r\n                                                \"IsContextful\":  false,\r\n                                                \"IsMarshalByRef\":  false,\r\n                                                \"GenericTypeArguments\":  \"\",\r\n                                                \"CustomAttributes\":  \"[System.Management.Automation.OutputTypeAttribute(typeof(System.String), ProviderCmdlet = \\\"Move-ItemProperty\\\")] [System.Management.Automation.Provider.CmdletProviderAttribute(\\\"Registry\\\", (System.Management.Automation.Provider.ProviderCapabilities)80)] [System.Management.Automation.OutputTypeAttribute(new Type[2] { typeof(Microsoft.Win32.RegistryKey), typeof(System.String) }, ProviderCmdlet = \\\"Get-ChildItem\\\")] [System.Management.Automation.OutputTypeAttribute(typeof(Microsoft.Win32.RegistryKey), ProviderCmdlet = \\\"Get-Item\\\")] [System.Management.Automation.OutputTypeAttribute(typeof(System.Security.AccessControl.RegistrySecurity), ProviderCmdlet = \\\"Get-Acl\\\")] [System.Management.Automation.OutputTypeAttribute(typeof(Microsoft.Win32.RegistryKey), ProviderCmdlet = \\\"Get-ChildItem\\\")] [System.Management.Automation.OutputTypeAttribute(typeof(Microsoft.Win32.RegistryKey), ProviderCmdlet = \\\"Get-Item\\\")] [System.Management.Automation.OutputTypeAttribute(new Type[4] { typeof(Microsoft.Win32.RegistryKey), typeof(System.String), typeof(System.Int32), typeof(System.Int64) }, ProviderCmdlet = \\\"Get-ItemProperty\\\")] [System.Management.Automation.OutputTypeAttribute(typeof(Microsoft.Win32.RegistryKey), ProviderCmdlet = \\\"New-Item\\\")]\"\r\n                                            },\r\n                       \"HelpFile\":  \"System.Management.Automation.dll-Help.xml\",\r\n                       \"Name\":  \"Registry\",\r\n                       \"PSSnapIn\":  {\r\n                                        \"Name\":  \"Microsoft.PowerShell.Core\",\r\n                                        \"IsDefault\":  true,\r\n                                        \"ApplicationBase\":  \"C:\\\\Windows\\\\System32\\\\WindowsPowerShell\\\\v1.0\",\r\n                                        \"AssemblyName\":  \"System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=MSIL\",\r\n                                        \"ModuleName\":  \"C:\\\\Windows\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\System.Management.Automation.dll\",\r\n                                        \"PSVersion\":  \"5.1.17763.2268\",\r\n                                        \"Version\":  \"3.0.0.0\",\r\n                                        \"Types\":  \"types.ps1xml typesv3.ps1xml\",\r\n                                        \"Formats\":  \"Certificate.format.ps1xml DotNetTypes.format.ps1xml FileSystem.format.ps1xml Help.format.ps1xml HelpV3.format.ps1xml PowerShellCore.format.ps1xml PowerShellTrace.format.ps1xml Registry.format.ps1xml\",\r\n                                        \"Description\":  \"This Windows PowerShell snap-in contains cmdlets used to manage components of Windows PowerShell.\",\r\n                                        \"Vendor\":  \"Microsoft Corporation\",\r\n                                        \"LogPipelineExecutionDetails\":  false\r\n                                    },\r\n                       \"ModuleName\":  \"Microsoft.PowerShell.Core\",\r\n                       \"Module\":  null,\r\n                       \"Description\":  \"\",\r\n                       \"Capabilities\":  80,\r\n                       \"Home\":  \"\",\r\n                       \"Drives\":  [\r\n                                      \"HKLM\",\r\n                                      \"HKCU\"\r\n                                  ]\r\n                   }\r\n}\r\n"
      exit_status = 0
  