That is the point, if it were a possible bundled PUP, then I would expect there to be associated file detections by hitman, where all we have here are registry detections.