IOC Report
d Notice.eml

loading gif

Files

File Path
Type
Category
Malicious
d Notice.eml
RFC 822 mail, ASCII text, with very long lines (343), with CRLF line terminators
initial sample
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241002045607Z-165.bmp
PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml
XML 1.0 document, ASCII text, with very long lines (2159), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Noto Sans\24003405683.ttf
TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2012 Google Inc. All Rights Reserved.Noto SansRegularMonotype Imaging - Noto SansVersi
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Noto Sans\29090505532.ttf
TrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2012 Google Inc. All Rights Reserved.Noto SansBoldMonotype Imaging - Noto Sans BoldNot
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
ASCII text, with very long lines (65536), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6F6EC6EC.dat
PNG image data, 936 x 1293, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\9KD1450E\ALIFAAT_ProductNotice_Aug_2024 (002).pdf
PDF document, version 1.7, 2 pages
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\9KD1450E\ALIFAAT_ProductNotice_Aug_2024 (002).pdf:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\9KD1450E\ALIFAAT_ProductNotice_Aug_2024.pdf
PDF document, version 1.7, 2 pages
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\9KD1450E\ALIFAAT_ProductNotice_Aug_2024.pdf:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\50E873D8-1A1A-4576-A238-6DEA6BB49E71
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\MSI6ca04.LOG
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-02 00-55-04-844.log
ASCII text, with very long lines (393)
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-02 00-56-05-611.log
ASCII text, with very long lines (393)
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\msoF6C1.tmp
GIF image data, version 89a, 15 x 15
dropped
C:\Users\user\AppData\Local\Temp\olkF45D.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\olkF46E.tmp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 03:55:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 03:55:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 03:55:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 03:55:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 2 03:55:30 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\Documents\ALIFAAT_ProductNotice_Aug_2024.pdf
PDF document, version 1.7, 2 pages
dropped
C:\Users\user\Documents\ALIFAAT_ProductNotice_Aug_2024.pdf:Zone.Identifier
ASCII text, with CRLF line terminators
modified
Chrome Cache Entry: 198
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 199
PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 200
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 201
ASCII text, with very long lines (2903)
dropped
Chrome Cache Entry: 202
Web Open Font Format, TrueType, length 100608, version 0.0
dropped
Chrome Cache Entry: 203
JSON data
dropped
Chrome Cache Entry: 204
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 205
ASCII text, with very long lines (32058)
dropped
Chrome Cache Entry: 206
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 207
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 208
Web Open Font Format, TrueType, length 95780, version 0.0
dropped
Chrome Cache Entry: 209
Unicode text, UTF-8 text, with very long lines (56971)
dropped
Chrome Cache Entry: 210
HTML document, ASCII text
dropped
Chrome Cache Entry: 211
MS Windows icon resource - 1 icon, 16x16
dropped
Chrome Cache Entry: 212
ASCII text, with very long lines (32033)
dropped
Chrome Cache Entry: 213
ASCII text
dropped
Chrome Cache Entry: 214
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 215
ASCII text, with very long lines (65362)
dropped
Chrome Cache Entry: 216
ASCII text
dropped
Chrome Cache Entry: 217
ASCII text, with very long lines (608)
dropped
Chrome Cache Entry: 218
Unicode text, UTF-8 text, with very long lines (35053), with no line terminators
dropped
Chrome Cache Entry: 219
ASCII text
dropped
Chrome Cache Entry: 220
HTML document, ASCII text, with very long lines (65499)
dropped
Chrome Cache Entry: 221
GIF image data, version 89a, 32 x 32
dropped
Chrome Cache Entry: 222
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 223
ASCII text
dropped
Chrome Cache Entry: 224
ASCII text, with very long lines (65499)
dropped
Chrome Cache Entry: 225
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 226
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 227
ASCII text, with very long lines (32033)
dropped
Chrome Cache Entry: 228
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 229
ASCII text, with very long lines (7711)
dropped
Chrome Cache Entry: 230
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 231
PNG image data, 27 x 27, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 232
ASCII text, with very long lines (12736)
dropped
Chrome Cache Entry: 233
ASCII text
dropped
Chrome Cache Entry: 234
ASCII text, with very long lines (65371)
dropped
Chrome Cache Entry: 235
PNG image data, 41 x 28, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 236
ASCII text, with very long lines (65321)
dropped
Chrome Cache Entry: 237
HTML document, ASCII text, with very long lines (1143)
dropped
Chrome Cache Entry: 238
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 239
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 240
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 241
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 242
ASCII text, with very long lines (608)
dropped
Chrome Cache Entry: 243
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 244
Unicode text, UTF-8 text, with very long lines (18993)
dropped
Chrome Cache Entry: 245
JSON data
dropped
Chrome Cache Entry: 246
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 247
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 248
Web Open Font Format, TrueType, length 99004, version 0.0
dropped
Chrome Cache Entry: 249
ASCII text
dropped
Chrome Cache Entry: 250
Unicode text, UTF-8 text, with very long lines (35053), with no line terminators
dropped
Chrome Cache Entry: 251
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 252
HTML document, Unicode text, UTF-8 text, with very long lines (3165)
dropped
Chrome Cache Entry: 253
MS Windows icon resource - 1 icon, 16x16
dropped
Chrome Cache Entry: 254
ASCII text, with very long lines (65321)
dropped
Chrome Cache Entry: 255
HTML document, ASCII text, with very long lines (65499)
dropped
Chrome Cache Entry: 256
GIF image data, version 89a, 32 x 32
dropped
Chrome Cache Entry: 257
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 258
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 259
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 260
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 261
ASCII text, with very long lines (65499)
dropped
Chrome Cache Entry: 262
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 263
Unicode text, UTF-8 text, with very long lines (18993)
dropped
Chrome Cache Entry: 264
ASCII text, with very long lines (32058)
dropped
Chrome Cache Entry: 265
ASCII text, with very long lines (12736)
dropped
Chrome Cache Entry: 266
assembler source, ASCII text, with very long lines (14445)
dropped
Chrome Cache Entry: 267
HTML document, ASCII text, with very long lines (627), with no line terminators
dropped
Chrome Cache Entry: 268
Web Open Font Format, TrueType, length 98640, version 0.0
dropped
Chrome Cache Entry: 269
ASCII text, with very long lines (7711)
dropped
Chrome Cache Entry: 270
ASCII text, with very long lines (2903)
dropped
Chrome Cache Entry: 271
ASCII text
dropped
Chrome Cache Entry: 272
HTML document, ASCII text
dropped
Chrome Cache Entry: 273
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 274
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 275
JSON data
dropped
Chrome Cache Entry: 276
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 277
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 278
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 279
PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
dropped
There are 125 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\d Notice.eml"
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "6AC826AD-4BBD-45AD-8D32-0AF1718F9352" "2C6966CE-D238-49AE-AE03-77D6AAD22179" "6516" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" /b /id 400_775915996 /if pdfshell_preva59ba0d7-05eb-4deb-99fe-647e8d5f1433 /CR
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2Flink.edgepilot.com%2Fs%2F120a65cd%2F92faESPp9EiMtn721vn3cg%3Fu%3Dhttp%3A**Alink.adder.com*c*7*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*rZBkfKjBfqredTQS-2QacA__%3BLy8vLy8v!!OkyjEqkqqe9UhNQ!yODuX79B2nTpENPfehnyCFUJuuvzfg0fOf1aTCAnPaMS76bnldMNOaotsAiIm92xxm4x4Uvdpoz9UMGu8MnF0grYKYf_n4F_Lw0%24&data=05%7C02%7CADACoordinator%40santaclaraca.gov%7Cf93995ac148340abe72008dce15903fe%7C28ea354810694e81aa0b6e4b3271a5cb%7C0%7C0%7C638633019912809270%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=wjBPzL9yWOp7%2B1aISfeMP49loY2QWPkpt%2FoR6DLGdaI%3D&reserved=0
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1972,i,13971064303503523449,5076289817585583702,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Documents\ALIFAAT_ProductNotice_Aug_2024.pdf"
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2164 --field-trial-handle=1612,i,1543790139076901750,12852091081081479806,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.adder.com/en/address-assignment-timeout
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://www.drupal.org/node/3183730
unknown
https://shell.suite.office.com:1443
unknown
https://stats.g.doubleclick.net/g/collect
unknown
https://designerapp.azurewebsites.net
unknown
https://autodiscover-s.outlook.com/
unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com
unknown
https://outlook.office365.com/connectors
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
https://cdn.entity.
unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
https://dev.visualwebsiteoptimizer.com/ee.gif?s=mode_det&e=
unknown
https://lookup.onenote.com/lookup/geolocation/v1
unknown
https://www.adder.com/sites/default/files/js/js_8oVYWeujLTnoEvtIRlm-amqzl6NUxdbcfLsQw_4D12g.js?scope=header&delta=3&language=en&theme=adder&include=eJxljmsOgzAMgy9U6JFQSrtQlOKqDRvHH0M8BPsV-1OcmLwPxTpAqxbKTe1LzFoNbVwiD-qw7DbBRQmNkpOwIxY4kma8JarEVR-hyZtPcC-UZPfZ-kgCPnB3vrd_xDDAEjoltqzpbomfvqWRFnPdy8h4r1UuooBozGZ7k4X6MEB-PZ_AzOteCtNsD_EFIVZ1DA
151.101.2.133
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
https://api.aadrm.com/
unknown
https://fontawesome.com
unknown
https://www.linkedin.com/company/adder-technology
unknown
https://canary.designerapp.
unknown
https://www.cookiebot.com
unknown
https://www.yammer.com
unknown
https://www.adder.com/sites/default/files/css/css_XXfi7PtGEm9OnGaKhfAftbieeXrT_YXAF3qlrZ427gc.css?delta=0&language=en&theme=adder&include=eJxljFEKwzAMQy-UNkca9uKlBicOdrK2t18ZXdnYj5Aeknz3TiUiOAVIiSxmUQSZvO_CNZ9QOC8ddTtjUWShqQMKfTdc-PCfUk3hrkYx2WggczPNRu4_MDGI5rASPtTKDVW7d4MW_0hoYJAPs_j1eJF51DZQ2BdKYUjnQnVE2o6hhyfT6vGtc9E0hF6_AF_d
151.101.2.133
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
https://api.microsoftstream.com/api/
unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
https://cr.office.com
unknown
http://getbootstrap.com)
unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft
unknown
https://otelrules.svc.static.microsoft
unknown
https://www.adder.com/en/kvm-solutions/secure#paragraph-title-bsecure-flexi-switchb
unknown
https://edge.skype.com/registrar/prod
unknown
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
https://tasks.office.com
unknown
https://officeci.azurewebsites.net/api/
unknown
https://my.microsoftpersonalcontent.com
unknown
https://aka.ms/FormsConsumerElite.
unknown
https://store.office.cn/addinstemplate
unknown
https://edge.skype.com/rps
unknown
https://www.adder.com/themes/custom/adder/favicon/favicon-32x32.png
151.101.2.133
https://messaging.engagement.office.com/
unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://www.adder.com/sites/default/files/css/css_zE8Y9G7uIfYn2kD5r3gA3M5QsV9QXcyAgVu2I2MJgA4.css?delta=1&language=en&theme=adder&include=eJxljFEKwzAMQy-UNkca9uKlBicOdrK2t18ZXdnYj5Aeknz3TiUiOAVIiSxmUQSZvO_CNZ9QOC8ddTtjUWShqQMKfTdc-PCfUk3hrkYx2WggczPNRu4_MDGI5rASPtTKDVW7d4MW_0hoYJAPs_j1eJF51DZQ2BdKYUjnQnVE2o6hhyfT6vGtc9E0hF6_AF_d
151.101.2.133
https://www.odwebp.svc.ms
unknown
https://api.powerbi.com/v1.0/myorg/groups
unknown
https://web.microsoftstream.com/video/
unknown
https://api.addins.store.officeppe.com/addinstemplate
unknown
https://graph.windows.net
unknown
https://www.adder.com/en/privacy-cookie-policy)
unknown
https://consent.config.office.com/consentcheckin/v1.0/consents
unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
https://d.docs.live.net
unknown
https://safelinks.protection.outlook.com/api/GetPolicy
unknown
https://ncus.contentsync.
unknown
https://raw.githubusercontent.com/jquery/jquery-ui/1.13.2/LICENSE.txt
unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://www.adder.com/themes/custom/adder/images/footer-background.svg
151.101.2.133
https://dev.visualwebsiteoptimizer.com/eu01/v.gif?cd=
unknown
https://www.adder.com/en/kvm-solutions/secure#paragraph-title-secure-multi-viewer-switch
unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
http://weather.service.msn.com/data.aspx
unknown
https://adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301
151.101.66.133
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
https://mss.office.com
unknown
https://pushchannel.1drv.ms
unknown
https://www.drupal.org/licensing/faq
unknown
https://wus2.contentsync.
unknown
https://jqueryui.com
unknown
https://clients.config.office.net/user/v1.0/ios
unknown
https://api.addins.omex.office.net/api/addins/search
unknown
https://ka-f.fontawesome.com
unknown
https://outlook.office365.com/api/v1.0/me/Activities
unknown
https://clients.config.office.net/user/v1.0/android/policies
unknown
https://raw.githubusercontent.com/jquery/jquery/3.7.1/LICENSE.txt
unknown
https://entitlement.diagnostics.office.com
unknown
https://link.edgepilot.com/s/120a65cd/92faESPp9EiMtn721vn3cg?u=http://link.adder.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-2QacA
https://www.adder.com/themes/custom/adder/js/lightbox/images/next.png
151.101.2.133
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
https://outlook.office.com/
unknown
http://link.adder.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-2QacA
20.73.171.203
https://storage.live.com/clientlogs/uploadlocation
unknown
https://dev.visualwebsiteoptimizer.com/eu01/events/
unknown
https://fontawesome.com/license/free
unknown
https://www.adder.com/sites/default/files/js/js_nMXzmgn1H9NW1i9vP01FtW8QuhGfY1kNje20harTicI.js?scope=footer&delta=0&language=en&theme=adder&include=eJxljmsOgzAMgy9U6JFQSrtQlOKqDRvHH0M8BPsV-1OcmLwPxTpAqxbKTe1LzFoNbVwiD-qw7DbBRQmNkpOwIxY4kma8JarEVR-hyZtPcC-UZPfZ-kgCPnB3vrd_xDDAEjoltqzpbomfvqWRFnPdy8h4r1UuooBozGZ7k4X6MEB-PZ_AzOteCtNsD_EFIVZ1DA
151.101.2.133
https://login.microsoftonline.com
unknown
https://substrate.office.com/search/api/v1/SearchHistory
unknown
https://raw.githubusercontent.com/jashkenas/underscore/1.13.6/LICENSE
unknown
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
unknown
https://service.powerapps.com
unknown
https://graph.windows.net/
unknown
https://devnull.onenote.com
unknown
https://messaging.office.com/
unknown
https://app.vwo.com/visitor-behavior-analysis/dist/codechecker/cc.min.js?r=
unknown
https://raw.githubusercontent.com/focus-trap/tabbable/v6.2.0/LICENSE
unknown
https://www.adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
https://skyapi.live.net/Activity/
unknown
https://api.cortana.ai
unknown
https://www.adder.com/themes/custom/adder/images/adder_tooth_navy.svg
151.101.2.133
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
link.edgepilot.com
199.30.234.133
s3-r-w.eu-west-1.amazonaws.com
3.5.65.107
code.jquery.com
151.101.130.137
gcc02.safelinks.eop-tm2.outlook.com
104.47.64.28
urldefense.com
52.71.28.102
pantheon-systems.map.fastly.net
151.101.2.133
dev.visualwebsiteoptimizer.com
34.96.102.137
maxcdn.bootstrapcdn.com
104.18.11.207
adder.com
151.101.66.133
www.google.com
142.250.184.228
cdproxy.eu.messagegears.net
20.73.171.203
consentcdn.cookiebot.com
unknown
ka-f.fontawesome.com
unknown
kit.fontawesome.com
unknown
consent.cookiebot.com
unknown
adder-assets.s3.eu-west-1.amazonaws.com
unknown
www.adder.com
unknown
cdn.forms.office.net
unknown
imgsct.cookiebot.com
unknown
link.adder.com
unknown
171.39.242.20.in-addr.arpa
unknown
gcc02.safelinks.protection.outlook.com
unknown
There are 12 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
199.30.234.133
link.edgepilot.com
United States
52.71.28.102
urldefense.com
United States
192.168.2.16
unknown
unknown
151.101.130.137
code.jquery.com
United States
142.250.184.228
www.google.com
United States
151.101.66.133
adder.com
United States
20.73.171.203
cdproxy.eu.messagegears.net
United States
34.96.102.137
dev.visualwebsiteoptimizer.com
United States
3.5.65.107
s3-r-w.eu-west-1.amazonaws.com
United States
104.18.11.207
maxcdn.bootstrapcdn.com
United States
239.255.255.250
unknown
Reserved
151.101.2.133
pantheon-systems.map.fastly.net
United States
104.47.64.28
gcc02.safelinks.eop-tm2.outlook.com
United States
There are 3 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
000b046b
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\3517490d76624c419a828607e2a54604
001f6000
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
000b049c
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
001f0433
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
000b0465
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
00030429
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
CantBootResolution
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
ProfileBeingOpened
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
BootDiagnosticsLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics
OutlookBootFlag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
&o<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
ProfileBeingOpened
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings
Accounts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing
EligibleForExtendedGrace
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@%SystemRoot%\system32\mlang.dll,-4612
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Wizards
PageSize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\MailSettings
Template
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
WMACUpdated
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Options
DefaultKerningLigatures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
BootDiagnosticsLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
CantBootResolution
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountSignaturesDialogOpen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Display Types\Balloons
HWND64ForOrphanedNotIcon
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
4w<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\ColleagueImport.ColleagueImportAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\Microsoft.VbaAddinForOutlook.1
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
$w<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
3w<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OscAddin.Connect
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
sw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UCAddin.LyncAddin.1
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
sw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UmOutlookAddin.FormRegionAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
rw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
rw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
rw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
rw<
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Search
IndexAvailableBody
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\UserInfo
SharingMachineID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeOutlook
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeOutlook
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
a4922304f05a0caf296a5dab7d32866b
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
a1907cf74a0e723ae4d6d10c2be13b22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
5f7af7540aa81b0933473148ec658dad
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
76e17cf74d1871db022de719ec047c24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
a534c6b591e8e4482771367da0dfc1a5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
6b5ad615dd992da766ae34dec0713a44
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnership
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
TickCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastRequest
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Security
OutlookSecureTempFolder
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@C:\Program Files\Adobe\Acrobat DC\Acrobat\pdfprevhndlr.dll,-101
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
ForceCacheRefresh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
OnceSucceeded
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office365.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\attachment-sdf.office.net
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook-sdf.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office365.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\AuthTrustedDomains\login.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\AuthTrustedDomains\login.microsoftonline.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\AuthTrustedDomains\login.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\AuthTrustedDomains\login.microsoftonline.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
DefaultFolderRelativePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Metadata
HideIfEmpty
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\account.box-gov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\app.box-gov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\app.box.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\ent.box.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\citrixdata.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\directtofile.sharefile.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\securevdr.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\securevdr.eu
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sharefile.eu
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sharefilestaging.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\api.dropbox.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\wopi.dropbox.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\integrations-prod.egnytegov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\integrations-staging.qa-egnytegov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\partner-integrations.egnyte.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\us-partner-integrations.egnyte.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\AuthTrustedDomains\google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\AuthTrustedDomains\mail.google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Logging
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
OutlookMAPI2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\outlook
EcsRequestPending
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109A10090400000000000F01FEC\Usage
OutlookMAPI2Intl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Exchange\Forms Registry
CacheSyncCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\ColleagueImport.ColleagueImportAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
ColleagueImport.ColleagueImportAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OneNote.OutlookAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
OneNote.OutlookAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OscAddin.Connect
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
OscAddin.Connect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UCAddin.LyncAddin.1
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
UCAddin.LyncAddin.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UmOutlookAddin.FormRegionAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
UmOutlookAddin.FormRegionAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6516
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\UserInfo
CountQuickSteps
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018000DDDFEBB86
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Search\Catalog
C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
NodeSlots
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}
FFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet
UseRWHlinkNavigation
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\BootTimeList\Boot
AHAppStarted
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ClientTelemetry\Sampling
24
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
FirstSessionTriggered
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
AppLaunchCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
ProcessSessionId
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
SessionInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
InteractionSessionId
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
InteractionSessionStartTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
ProcessExeVersion
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
IsDebugSession
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
LifecycleState
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\Common
UID
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
EcsRequestPending
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
SessionId
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
Language
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Tas\hxmail
TasRequestPending
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\ConfigSettings
UnsuccessfulBootsMail
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Audience
AudienceId
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\BootTimeList\Boot
AHDoFirstNonThrottledIdleOnAppThread
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\Spotlight
LatestShownMailSpotlightVersion
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\FirstRun
MailFirstRunSlide
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\BootTimeList\Boot
AHOnAllActivationDeferralsCompletedOnUIThread
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\BootTimeList\Boot
AHOnActivationEndedOnUIThread
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
LastSetPrelaunchValue
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache
RemoteClearDate
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3
Last
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3\0
FilePath
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3\0
StartDate
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3\0
EndDate
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3\0
Properties
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=2057&syslcid=8192&uilcid=2057&build=16.0.11629&crev=3\0
Url
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableIsOwnerRegex
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
CountryCode
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
BuildNumber
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail
Expires
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.1
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.2
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.3
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.4
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.5
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.6
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.7
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.8
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.9
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.10
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.11
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.12
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.13
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.14
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.15
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.16
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.17
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.18
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.19
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
1.20
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
VersionId
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail
ETag
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail
DeferredConfigs
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment
ABData
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\WinRTSuspensionSetupDeferral
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\000001C9F4007728 AppFrameInvocationDeferral
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
LastCriticalExtendedExecutionState
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
AppHostSuspensionState
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\AppHostSuspendingOnBackgroundThreadDeferral
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\AppHostMainMarshalingDeferral
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\WinRTSuspensionSetupDeferral
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\CT_OutlookSuspend
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\ExtendedExecutionRequestDeferral
DeferralInitTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\AppHostSuspendingOnBackgroundThreadDeferral
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\ExtendedExecutionRequestDeferral
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\CT_OutlookSuspend
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\AppHostMainMarshalingDeferral
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
LastSuspensionDurationInMsec
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost\SuspensionDeferralList\000001C9F4007728 AppFrameInvocationDeferral
DeferralCompleteTime
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
EcsRequestPending
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Experiment\hxmail
EcsRequestPending
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail\ConfigContextData
ChunkCount
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\hxmail
Expires
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\ConfigSettings
UnsuccessfulBootsMail
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
AppHostSuspensionState
\REGISTRY\A\{c6b8e6a5-fbbe-be13-5bd0-decee9d89e98}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\AppHost
LastCriticalExtendedExecutionState
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileSource
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sFileAncestors
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uPageCount
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sAssetId
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
bisSharedFile
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sFileAncestors
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uPageCount
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
bisSharedFile
There are 702 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
B3AEFEC000
stack
page read and write
23EDEED5000
heap
page read and write
1EB2A274000
heap
page read and write
B3AF2FE000
stack
page read and write
23EDEB40000
heap
page read and write
23EDEED0000
heap
page read and write
1EB24190000
trusted library allocation
page read and write
23EDEC40000
heap
page read and write
23EDEC20000
heap
page read and write
B3AF37F000
stack
page read and write
1EB2439F000
heap
page read and write
1EB2A400000
trusted library allocation
page read and write
23EDEE50000
heap
page read and write
23EDECD0000
heap
page read and write
1EB2438F000
heap
page read and write
B3AF27E000
stack
page read and write
23EDECD9000
heap
page read and write
1EB2A2A3000
heap
page read and write
1EB2A22E000
heap
page read and write
There are 9 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://link.edgepilot.com/s/120a65cd/92faESPp9EiMtn721vn3cg?u=http://link.adder.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-2QacA
https://www.adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301
https://www.adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301
https://www.adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301
https://www.adder.com/en/address-assignment-timeout?utm_source=enduser-email&utm_medium=email&utm_campaign=ALIFAAT&utm_content=email2&_cldee=v6DCT7I78t2E8iHOnbpaKBnKt3w3SjXslMDyPhePtQ0y-rDSlL-0RqVBfu3sTn3Rr9IBMjo5qWgwek6U9NgwaA&recipientid=lead-47a66b177355ef11bfe36045bd10f06b-f70dda727cb344c08022b0ade4442c89&esid=6070f558-c358-ef11-bfe2-7c1e522e2301