oval:org.mitre.oval:obj:6408

Object Id: oval:org.mitre.oval:obj:309 Version:4 
Comment: The registry key that holds the location of the 32 bit program files directory.
Type: registry_object Namespace: windows
Object Details:
Behaviors:
windows_view:  "32_bit"
hive:
operation:  "equals" datatype:  "string" mask:  "false"
value: "HKEY_LOCAL_MACHINE"
key:
operation:  "equals" datatype:  "string" mask:  "false"
value: "SOFTWARE\Microsoft\Windows\CurrentVersion"
name:
operation:  "equals" datatype:  "string" mask:  "false"
value: "ProgramFilesDir"
Referenced By:
oval:org.mitre.oval:var:620
Variable Id: oval:org.mitre.oval:var:620 Version:4 
Comment: Microsoft Host Integration Server\system folder in Program Files
Type: local_variable Namespace: None
Datatype: string
Variable Details:
concat Function: 
escape_regex Function: 
Object Component:
Object Reference: oval:org.mitre.oval:obj:309
Item Field: value
Literal Component:
string : ^
Literal Component:
string : \\Microsoft Host|Host Integration Server 20[\d][\d]\\system$
Object Id: oval:org.mitre.oval:obj:6408 Version:4 
Comment:
Type: file_object Namespace: windows
Object Details:
path:
operation:  "pattern match" datatype:  "string" mask:  "false"
var_check:  "all" var_ref:  "oval:org.mitre.oval:var:620"
filename:
operation:  "equals" datatype:  "string" mask:  "false"
value: "Snarpcsv.exe"