oval:org.mitre.oval:obj:30072

Object Id: oval:org.mitre.oval:obj:30018 Version:2 
Comment: Object holds the registry key HKLM\Software\Mozilla\Mozilla Thunderbird\.*!Install directory
Type: registry_object Namespace: windows
Object Details:
Behaviors:
windows_view:  "32_bit"
hive:
operation:  "equals" datatype:  "string" mask:  "false"
value: "HKEY_LOCAL_MACHINE"
key:
operation:  "pattern match" datatype:  "string" mask:  "false"
value: "^Software\\Mozilla\\Mozilla Thunderbird\\.*$"
name:
operation:  "pattern match" datatype:  "string" mask:  "false"
value: "^[i|I]nstall [d|D]irectory$"
Referenced By:
oval:org.mitre.oval:var:1579
Variable Id: oval:org.mitre.oval:var:1579 Version:2 
Comment: Full file path to %ProgramFiles%\%Firefox_directory%\defaults\pref
Type: local_variable Namespace: None
Datatype: string
Variable Details:
concat Function: 
Object Component:
Object Reference: oval:org.mitre.oval:obj:30018
Item Field: value
Literal Component:
string : \defaults\pref
Object Id: oval:org.mitre.oval:obj:30168 Version:3 
Comment: Object holds info about channel-prefs.js (Mainline version)
Type: textfilecontent54_object Namespace: independent
Object Details:
path:
operation:  "equals" datatype:  "string" mask:  "false"
var_check:  "at least one" var_ref:  "oval:org.mitre.oval:var:1579"
filename:
operation:  "equals" datatype:  "string" mask:  "false"
value: "channel-prefs.js"
pattern:
operation:  "pattern match" datatype:  "string" mask:  "false"
value: "^.*app\.update\.channel.*release.*$"
instance:
operation:  "equals" datatype:  "int" mask:  "false"
value: "1"
Referenced By:
oval:org.mitre.oval:var:1106
Variable Id: oval:org.mitre.oval:var:1106 Version:3 
Comment: Full file path to Thunderbird.exe (Mainline version)
Type: local_variable Namespace: None
Datatype: string
Variable Details:
regex_capture Function: 
Object Component:
Object Reference: oval:org.mitre.oval:obj:30168
Item Field: path
Object Id: oval:org.mitre.oval:obj:30072 Version:3 
Comment: Object holds the filepath to thunderbird.exe (Mainline version)
Type: file_object Namespace: windows
Object Details:
path:
operation:  "equals" datatype:  "string" mask:  "false"
var_check:  "at least one" var_ref:  "oval:org.mitre.oval:var:1106"
filename:
operation:  "equals" datatype:  "string" mask:  "false"
value: "thunderbird.exe"