regexpowershellguiduninstallstring

Extract GUID from UninstallString


i want to have an overview of any software which is installed on a Windows system (or at least all software that is registering itself in Windows). With Powershell i am able to extract the data into a gridview and after filtering there into a csv file. For that i am using the following code:

### Extract x64 registered programs. Excluding KB updates

$data = dir HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall |
   where {$_.name -notmatch '(\.)?KB\d+'}  -pv p |
   Get-ItemProperty |
     Where {$_.displayname -notmatch "KB\d{5,}"} |
   Select @{Name="Path";Expression={$p.name}},Displayname,DisplayVersion,InstallDate,UninstallString
;

### Extract and append to $data the x86 registered programs. Excluding KB updates

$data += dir HKLM:\SOFTWARE\Wow6432Node\Micsosoft\Windows\CurrentVersion\Uninstall |
   where {$_.name -notmatch '(\.)?KB\d+'}  -pv p |
   Get-ItemProperty |
     Where {$_.displayname -notmatch "KB\d{5,}"} |
   Select @{Name="Path";Expression={$p.name}},DisplayName,DisplayVersion,InstallDate,UninstallString
;

### Acces $data and output to a gridview and further to csv.

$data |
   select-Object DisplayName,DisplayVersion,InstallDate,UninstallString |
   sort-object -Property DisplayName |
   out-gridview -PassTHru |
   export-csv -delimiter "," -Path C:\temp\software.csv

An example output looks like this:

DisplayName                         DisplayVersion  InstallDate UninstallString    
7-Zip 9.20 (x64 edition)            9.20.00.0       20190827    MsiExec.exe /I{23170F69-40C1-2702-0920-000001000000}
QGIS 3.4.13 'Madeira'               03.04.2013                  C:\Program Files\QGIS 3.4\uninstall.exe
Microsoft Office Access ...         14.0.7015.      20190827    MsiExec.exe /X{90140000-0015-0407-0000-0000000FF1CE}
Realtek Card Reader 10.0.10125....  20190827                    "C:\Program Files (x86)\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe" -runfromtemp  -removeonly

For further processing i want to append a column where the GUID - if it is existing - is extracted from the UninstallString. Example:

DisplayName                         DisplayVersion  InstallDate GUID                                  UninstallString
7-Zip 9.20 (x64 edition)            9.20.00.0       20190827    23170F69-40C1-2702-0920-000001000000  MsiExec.exe /I{23170F69-40C1-2702-0920-000001000000}
QGIS 3.4.13 'Madeira'               03.04.2013                                                        C:\Program Files\QGIS 3.4\uninstall.exe
Microsoft Office Access ...         14.0.7015.      20190827    90140000-0015-0407-0000-0000000FF1CE  MsiExec.exe /X{90140000-0015-0407-0000-0000000FF1CE}
Realtek Card Reader 10.0.10125....  20190827                    5BC2B5AB-80DE-4E83-B8CF-426902051D0A  "C:\Program Files (x86)\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe" -runfromtemp  -removeonly

I know that i have to do it somehow with a RegEx code but i am not able to proceed further. May someone is able to help me out? Thank you


Solution

  • You can extract the GUID from the UninstallString using a regex -match and add that as a calculated property to the Select-Object:

    $reGuid = '\{?(([0-9a-f]){8}-([0-9a-f]){4}-([0-9a-f]){4}-([0-9a-f]){4}-([0-9a-f]){12})\}?'
    
    $data | Select-Object DisplayName,DisplayVersion,InstallDate,
                          @{Name = 'GUID'; Expression = { if ($_.UninstallString -match $reGuid) {$matches[1]}} },
                          UninstallString |
            Sort-Object -Property DisplayName |
            Out-GridView -PassThru |
            Export-Csv -Delimiter "," -Path 'C:\temp\software.csv' -NoTypeInformation
    

    Regex details:

    \{                    Match the character “{” literally
       ?                  Between zero and one times, as many times as possible, giving back as needed (greedy)
    (                     Match the regular expression below and capture its match into backreference number 1
       (                  Match the regular expression below and capture its match into backreference number 2
          [0-9a-f]        Match a single character present in the list below
                          A character in the range between “0” and “9”
                          A character in the range between “a” and “f”
       ){8}               Exactly 8 times
       -                  Match the character “-” literally
       (                  Match the regular expression below and capture its match into backreference number 3
          [0-9a-f]        Match a single character present in the list below
                          A character in the range between “0” and “9”
                          A character in the range between “a” and “f”
       ){4}               Exactly 4 times
       -                  Match the character “-” literally
       (                  Match the regular expression below and capture its match into backreference number 4
          [0-9a-f]        Match a single character present in the list below
                          A character in the range between “0” and “9”
                          A character in the range between “a” and “f”
       ){4}               Exactly 4 times
       -                  Match the character “-” literally
       (                  Match the regular expression below and capture its match into backreference number 5
          [0-9a-f]        Match a single character present in the list below
                          A character in the range between “0” and “9”
                          A character in the range between “a” and “f”
       ){4}               Exactly 4 times
       -                  Match the character “-” literally
       (                  Match the regular expression below and capture its match into backreference number 6
          [0-9a-f]        Match a single character present in the list below
                          A character in the range between “0” and “9”
                          A character in the range between “a” and “f”
       ){12}              Exactly 12 times
    )                  
    \}                    Match the character “}” literally
       ?                  Between zero and one times, as many times as possible, giving back as needed (greedy)