Automated Malware Analysis IOC Report for

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 68 34 56 48 30 32 77 3D 22 CA 0D C2 19 00 00 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
Value name:	CantBootResolution
Value data:	BootSuccess

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
Value name:	ProfileBeingOpened
Value data:	NoEmail

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
Value name:	SessionId
Value data:	C436DE6D-916F-42E5-B39F-584E2FEE7C5D

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
Value name:	BootDiagnosticsLogFile
Value data:	C:\Users\user~1\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241024T0220110600-6920.etl

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics
Value name:	OutlookBootFlag
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	,%=
Value data:	2C 25 3D 00 D0 10 00 00 01 00 00 00 00 00 00 00 09 B9 07 DF DC 25 DB 01 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
Value name:	SessionId
Value data:	0CE0A864-326A-4FBF-89B2-2B43730EF39B

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
Value name:	ProfileBeingOpened
Value data:	NoEmail

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings
Value name:	Accounts
Value data:	[{"scope":"global","userUpn":"","accountAge":0,"timestamp":0,"anchorMailbox":"","primarySmtp":"","roamingStatus":"GLOBALANDACCOUNTUNVERIFIED","ownerType":"UNKNOWN"}]

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
Value name:	@%SystemRoot%\system32\mlang.dll,-4612
Value data:	Western European (Windows)

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
Value name:	@%SystemRoot%\system32\mlang.dll,-4608
Value data:	Unicode

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Licensing
Value name:	EligibleForExtendedGrace
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Security
Value name:	OutlookSecureTempFolder
Value data:	C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\9IETW22K\

Signature Hits	Behavior Group	Mitre Attack
Sigma detected: Outlook Security Settings Updated - Registry	System Summary

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC
Value name:	MSIPP-MK
Value data:	01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 E4 47 F6 7E 10 BE 11 4A AA 48 84 36 6C BA 29 9D 00 00 00 00 04 00 00 00 20 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 56 30 63 B6 2F 0C 36 F1 B3 B6 27 98 96 44 6D 66 73 59 16 F6 3E 19 0F C9 67 AB 8A 76 A7 FD AC F5 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 76 E0 A3 CB E1 18 B6 ED C8 2B 84 98 DE D1 3B 1E 48 BA 97 FE 0F FF E6 3E F4 EA A9 87 F4 68 DD 62 A0 04 00 00 75 DE 70 C9 EE 92 16 27 B6 44 0B E2 F5 19 19 B1 98 FC D1 DB 32 A1 8A 93 DE 13 3D 4B 10 5B 85 04 AF 58 1B F2 63 25 00 2F 9F EC 89 A9 98 11 41 9C DF 70 BB 7C DB 60 95 FD 4C D4 39 0A 9D F9 81 62 76 C4 02 F2 77 83 10 64 EE C3 94 B7 60 D4 F4 E4 36 27 CD 03 1B A9 FC 79 7B 7D A6 71 BF 0C FD 3A 8F 80 E3 2C D2 75 FF 66 AE 98 D7 30 28 1E DB 70 84 55 2B 91 2B 09 F9 B1 DC D2 08 04 47 C4 73 6F 0A BC E4 B0 93 F0 D8 90 0D 95 8B 51 E8 AB AF 42 31 0D 92 67 6D 2C 8F 70 74 D3 4E CC D5 13 BC EA 8D 5B 64 35 11 C2 D5 B3 75 51 98 C3 F4 A1 D2 0A 8D 83 0E B0 41 04 88 AA C7 75 3A 9E 24 D2 B4 30 B6 44 47 4F B3 54 D4 59 1D E9 65 65 2C 17 8C 11 8D 02 B3 C6 05 A5 F5 80 05 13 45 5C 2F 05 32 5C 7F DD 7C 38 04 9F 40 87 99 DF 94 61 F2 FF 58 8F 77 67 A9 19 3F F9 5B 70 C8 17 BD 85 08 FB F7 5A 94 F8 49 F8 09 23 9F D3 D5 A2 1E B2 0E 61 A5 F6 6A 8C 96 28 87 CC 64 29 58 00 A8 FC 25 6A 64 4B BE A1 BC 8A 2D 48 6E 18 1F C2 45 AF 3F 1D 7F 23 15 E9 22 1E 32 73 09 1B 57 BE 73 DB CF 31 39 33 24 25 91 A3 61 31 04 11 29 B1 94 E4 11 32 DC B5 75 CE 0B 1B 0B 24 55 CC 85 09 8B AB 15 21 AC 50 4A C1 5C D0 33 FA 20 0A F3 19 D3 16 E3 3F 5B C9 38 51 04 4E F3 3C BA EC FF 3B F8 B2 AD 5D 1D 1C AF AF 41 AD C5 9E 5D 2B EF FD 85 D1 5E A2 82 34 99 41 10 69 DA 5F FD BF DF 71 C0 29 C7 BD 66 A8 3C 52 60 EB E0 36 15 FC C7 28 5E DC ED D1 AF 22 C1 D3 CC 63 1F 8B CB CF 51 6F DA 88 5F E8 CA A0 02 8A 5F 1E CD 83 FF 4A 7F FD 7D 00 FD C4 49 53 84 D9 25 3D 29 17 99 9D 9F 33 00 67 F7 09 BF 9F 36 B0 11 4F C6 2B CB B3 4A 93 3B C0 3D F5 F1 2D 50 CB 95 30 FD 31 BD 74 3B CC D2 7A 1F 04 33 5E 21 C5 6B 65 E1 75 18 6F 87 99 A0 4E 1A 33 E2 6E DC 68 E8 23 7B 50 1C B0 21 43 5C 80 6B CC 20 9D 75 71 DB 46 E1 66 2C A3 7B 83 1E 7D CC D2 52 B6 91 E8 1C 79 43 B2 7C AE 26 49 65 60 EC 31 E4 3E 19 AB 32 C4 17 7C D2 D4 0A 5D 8B 7B BE A9 7C 32 4D EA 64 4B 3B 5B D2 D7 50 0B 7D CA 5F E2 E5 08 59 2B 27 32 FE 59 1D 47 DE 76 65 1A 7B 67 E0 8D 01 2E 09 BB C0 2B 75 BE 12 B2 7B DA F6 90 4C 41 0A 03 2B CB CE 5C 58 CA 4B 84 EC 55 48 14 0C 8E 5B BF 70 67 22 08 0B C6 E6 90 A7 AD AD E8 F0 B1 67 60 EC 7B 2A 5A C1 15 B6 CF AB CD 93 C3 0A 95 EF 36 8D 1E 30 89 74 D5 74 D3 73 15 52 54 47 82 7E 00 CF 85 99 E2 49 C8 7C 4F 54 8E 75 69 33 DF 0B CB 4F DE 6F 85 18 11 D8 65 3E 3A B4 A1 2E 78 43 AA 60 67 07 0B D2 48 33 23 3D 80 CC 24 F7 0E D5 81 3D 49 43 78 B2 CD 79 C1 60 D8 29 AC 1D FA E4 29 04 D9 7B 78 4F A0 DC 31 C5 41 E1 12 D6 E3 8D 28 2B 53 FC 63 CD 6A 9A 40 03 5A 3A D0 47 14 2C 60 38 0E B0 9A 09 AD 0B F4 BD 38 E1 49 DB CF E3 9C 65 E3 DB 97 30 6D ED 2E 23 D0 FB 58 86 31 7D 31 A0 18 59 18 D5 62 A5 4D E1 72 4E 9F 42 25 06 A4 C4 9B 80 58 B3 CA 99 7C C6 E3 4A AA C2 E1 69 FA 7C 47 71 75 55 96 40 FA AF 83 0E 96 C2 EC 8A 97 31 37 AA 28 A1 08 EF 99 63 B5 E5 41 B5 00 AF 09 6A 44 30 D0 9C 15 20 CC C5 A6 02 67 7C E0 3C 60 DD F5 C2 17 B8 F5 AE 56 75 2A 5A 51 09 9B 6F 1D F2 7C 78 4F C2 27 D6 C2 90 D6 D7 26 5C 30 11 C3 96 C9 E8 6D 11 D8 F7 75 BC 06 4D B8 12 38 7E C9 80 71 EC AE 84 5C 71 1B A5 36 8B 13 E5 14 27 8D EA 15 04 F0 A5 86 F6 EF 04 50 B3 12 67 78 CF 77 DF C4 7B EB AA 52 27 54 02 E7 CA 19 16 40 28 A2 13 52 A8 3A 12 61 6F 19 36 F9 A1 7E 59 FE 7E E6 52 65 A7 BB 47 8F B8 8E 93 B2 8F DB 53 33 39 E5 A3 31 8F B4 26 DA 9F 83 F6 6A A0 A2 EE 3D 6A 9B B7 7A 88 3A 49 FE C2 74 8A 0D 66 BF B6 2D F3 82 02 2C B4 4D 43 5A CB 7C C5 40 4F 1A FA A6 B4 A7 F3 EA 70 53 CB C5 BE 67 42 D9 FA 9F D2 75 4D 92 F7 D1 36 0B 2E 10 90 7D 47 5E FB A2 23 6F 36 63 D1 9E 11 84 2A C8 40 05 C4 7B 0B A8 70 A8 6E 98 E6 5B 58 E5 A6 08 19 2C CA 1C D3 AB 1D 9D B4 3E FF 63 3C 26 A1 4D 02 AF F6 86 D0 AD 07 9D F5 00 BD AD 2C D8 A3 7F 31 23 E5 1A E1 FC 0D A4 40 00 00 00 F3 3F 5D 54 DC 11 1B 2D 22 24 9F 00 BE C3 6E A4 15 BF 5D 2E 14 B6 DF 2E 37 A8 63 B2 99 5D CC 68 14 90 D7 B7 CA 41 3B 4C F4 2B 24 22 5A A1 9C 8D 6F 18 1A 72 1B A9 EB DF B7 C9 4A A5 AC 19 16 4D

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC
Value name:	MSIPP-SK
Value data:	01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 E4 47 F6 7E 10 BE 11 4A AA 48 84 36 6C BA 29 9D 00 00 00 00 04 00 00 00 20 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 48 CA 1D 1E AE 6E 1C 6D A8 EC CC FB 72 A9 8C 4D 2D BA 30 2F 22 35 8B BE 5D 75 EB DA D1 F1 8A 18 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 0F 02 85 3B 2E 5E A9 E8 6C 1B D1 1A 2C 6D 05 27 62 33 BE 39 AA E5 83 EB 85 63 FF 3C 39 01 C7 DD 90 00 00 00 C4 C2 50 EE 80 3A BB 4A 02 D9 50 B8 D9 E1 E1 B4 78 EE 6C E4 93 EB B5 BC D7 70 BA 31 C5 A7 15 21 DF 07 A5 D0 64 15 CB D2 B5 9F E4 F7 29 B5 8A 0B 76 C5 68 E2 6C D8 5D B3 AB 03 CC 39 79 CA 42 9B A4 11 51 61 0B C3 3A A6 AA 78 DA 73 C9 95 8A 3C 3C 01 85 C3 0B 2B 92 5A 6C C8 7B 36 24 61 A2 B1 ED 31 C4 11 90 57 D8 2C A0 51 BF 26 6F 4C E8 56 18 A6 C4 3D 4D C9 B4 7E B8 AD 4C 7A 04 DC 9A 48 75 36 B4 09 51 0F 68 C1 E5 E2 04 52 0D 10 69 AE 40 00 00 00 13 B8 5C CA 9D 12 DE 40 41 2E 1B AA D8 AE 58 77 B7 9D BF 93 35 80 91 BB C4 53 E7 0F AB 3A CD C5 A8 42 AC D7 B3 7F E2 2C 50 F2 9A 66 44 AB AA B1 7D 27 35 2E 3C 2A 82 53 E1 67 33 53 93 04 00 F0

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
Value name:	NULL
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
Value name:	ClockTimeSeconds
Value data:	49 E7 19 67 00 00 00 00

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
Value name:	TickCount
Value data:	79 A3 02 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
Value name:	RoamingLastSyncTimeOutlook
Value data:	E8 07 0A 00 04 00 18 00 06 00 14 00 39 00 72 03

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
Value name:	RoamingLastWriteTimeOutlook
Value data:	E8 07 0A 00 04 00 18 00 06 00 14 00 39 00 72 03

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo
Value name:	ServerType
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo
Value name:	IssuanceLicV2Enabled
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo
Value name:	ServiceDiscoveryUri
Value data:	https://3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com/_wmcs/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo
Value name:	ServiceDiscoveryUriChecked
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo
Value name:	Version
Value data:	1.0.0.0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Certification
Value name:	Vdir
Value data:	_wmcs/certification

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Certification
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Certification
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Licensing
Value name:	Vdir
Value data:	_wmcs/licensing

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Licensing
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\Licensing
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\ServiceDiscovery
Value name:	Vdir
Value data:	_wmcs/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\ServiceDiscovery
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msospn\ServiceDiscovery
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Certification
Value name:	Vdir
Value data:	_wmcs/certification

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Certification
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Certification
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Licensing
Value name:	Vdir
Value data:	_wmcs/licensing

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Licensing
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\Licensing
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\ServiceDiscovery
Value name:	Vdir
Value data:	_wmcs/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\ServiceDiscovery
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msosso\ServiceDiscovery
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Certification
Value name:	Vdir
Value data:	_wmcs/certificationexternal

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Certification
Value name:	QueryString
Value data:	?Whr=urn:HostedRmsOnlineService:Certification

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Certification
Value name:	RequiresRedirect
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Certification
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Licensing
Value name:	Vdir
Value data:	_wmcs/licensing

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Licensing
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\Licensing
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\ServiceDiscovery
Value name:	Vdir
Value data:	_wmcs/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\ServiceDiscovery
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\msossp\ServiceDiscovery
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\Certification
Value name:	Vdir
Value data:	_wmcs/oauth2/certification

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\Certification
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\Certification
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\ServiceDiscovery
Value name:	Vdir
Value data:	_wmcs/oauth2/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\ServiceDiscovery
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\oauth2\ServiceDiscovery
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Certification
Value name:	Vdir
Value data:	_wmcs/certificationexternal

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Certification
Value name:	QueryString
Value data:	?Whr=urn:microsoftrmsonline:x509

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Certification
Value name:	RequiresRedirect
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Certification
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Licensing
Value name:	Vdir
Value data:	_wmcs/licensing

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Licensing
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\Licensing
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\ServiceDiscovery
Value name:	Vdir
Value data:	_wmcs/servicediscovery

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\ServiceDiscovery
Value name:	RequiresRedirect
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\MSIPC\3d248eb1-0a4d-46d7-8654-303e982f1249.rms.na.aadrm.com\ServerInfo\AuthTypes\x509\ServiceDiscovery
Value name:	RequiresBrowser
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Wizards
Value name:	PageSize
Value data:	A4

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\MailSettings
Value name:	Template

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
Value name:	WMACUpdated
Value data:	38

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Options
Value name:	DefaultKerningLigatures
Value data:	1

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	NULL
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	HyphenationFiles_1033
Value data:	1498939393

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
Value name:	BootDiagnosticsLogFile
Value data:	C:\Users\user~1\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241024T0220500007-4304.etl

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
Value name:	CantBootResolution
Value data:	BootSuccess

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
Value name:	global_AccountSignaturesDialogOpen
Value data:	{"name":"AccountSignaturesDialogOpen","itemClass":"","id":"","scope":"global","parentSetting":"","secondaryKey":"","status":"PENDINGSYNC","type":"Bool","timestamp":0,"metadata":"","value":"false","isFirstSync":"true","source":"UserOverride"}

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	fa=
Value data:	66 61 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 B2 23 53 E8 DC 25 DB 01 F8 00 00 00 01 00 00 00 A2 00 00 00 4A 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 61 00 64 00 64 00 69 00 6E 00 73 00 5C 00 63 00 6F 00 6C 00 6C 00 65 00 61 00 67 00 75 00 65 00 69 00 6D 00 70 00 6F 00 72 00 74 00 2E 00 64 00 6C 00 6C 00 00 00 63 00 6F 00 6C 00 6C 00 65 00 61 00 67 00 75 00 65 00 69 00 6D 00 70 00 6F 00 72 00 74 00 2E 00 63 00 6F 00 6C 00 6C 00 65 00 61 00 67 00 75 00 65 00 69 00 6D 00 70 00 6F 00 72 00 74 00 61 00 64 00 64 00 69 00 6E 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Display Types\Balloons
Value name:	HWND64ForOrphanedNotIcon
Value data:	64 05 01 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\ColleagueImport.ColleagueImportAddin
Value name:	1
Value data:	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\Microsoft.VbaAddinForOutlook.1
Value name:	1
Value data:	01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	db=
Value data:	64 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 81 0F 5F E8 DC 25 DB 01 BC 00 00 00 01 00 00 00 86 00 00 00 2A 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 6F 00 6E 00 62 00 74 00 74 00 6E 00 6F 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 6F 00 6E 00 65 00 6E 00 6F 00 74 00 65 00 2E 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin
Value name:	1
Value data:	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Signature Hits	Behavior Group	Mitre Attack
Sigma detected: Office Autorun Keys Modification	System Summary

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	sb=
Value data:	73 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 AD 71 61 E8 DC 25 DB 01 C2 00 00 00 01 00 00 00 94 00 00 00 22 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 73 00 6F 00 63 00 69 00 61 00 6C 00 63 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 6F 00 72 00 2E 00 64 00 6C 00 6C 00 00 00 6F 00 73 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 63 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OscAddin.Connect
Value name:	1
Value data:	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	cb=
Value data:	63 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 76 D4 63 E8 DC 25 DB 01 B8 00 00 00 01 00 00 00 84 00 00 00 28 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 75 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 64 00 6C 00 6C 00 00 00 75 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 6C 00 79 00 6E 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 31 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UCAddin.LyncAddin.1
Value name:	1
Value data:	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	cb=
Value data:	63 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 76 D4 63 E8 DC 25 DB 01 EA 00 00 00 01 00 00 00 A0 00 00 00 3E 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 61 00 64 00 64 00 69 00 6E 00 73 00 5C 00 75 00 6D 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 2E 00 64 00 6C 00 6C 00 00 00 75 00 6D 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 2E 00 66 00 6F 00 72 00 6D 00 72 00 65 00 67 00 69 00 6F 00 6E 00 61 00 64 00 64 00 69 00 6E 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UmOutlookAddin.FormRegionAddin
Value name:	1
Value data:	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	sb=
Value data:	73 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 65 36 66 E8 DC 25 DB 01 BC 00 00 00 01 00 00 00 86 00 00 00 2A 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 6F 00 6E 00 62 00 74 00 74 00 6E 00 6F 00 6C 00 2E 00 64 00 6C 00 6C 00 00 00 6F 00 6E 00 65 00 6E 00 6F 00 74 00 65 00 2E 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	sb=
Value data:	73 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 65 36 66 E8 DC 25 DB 01 C2 00 00 00 01 00 00 00 94 00 00 00 22 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 73 00 6F 00 63 00 69 00 61 00 6C 00 63 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 6F 00 72 00 2E 00 64 00 6C 00 6C 00 00 00 6F 00 73 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 63 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	sb=
Value data:	73 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 65 36 66 E8 DC 25 DB 01 B8 00 00 00 01 00 00 00 84 00 00 00 28 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 75 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 64 00 6C 00 6C 00 00 00 75 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 6C 00 79 00 6E 00 63 00 61 00 64 00 64 00 69 00 6E 00 2E 00 31 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
Value name:	sb=
Value data:	73 62 3D 00 D0 10 00 00 02 00 00 00 00 00 00 00 65 36 66 E8 DC 25 DB 01 EA 00 00 00 01 00 00 00 A0 00 00 00 3E 00 00 00 63 00 3A 00 5C 00 70 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 66 00 69 00 6C 00 65 00 73 00 20 00 28 00 78 00 38 00 36 00 29 00 5C 00 6D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 20 00 6F 00 66 00 66 00 69 00 63 00 65 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 6F 00 66 00 66 00 69 00 63 00 65 00 31 00 36 00 5C 00 61 00 64 00 64 00 69 00 6E 00 73 00 5C 00 75 00 6D 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 2E 00 64 00 6C 00 6C 00 00 00 75 00 6D 00 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 61 00 64 00 64 00 69 00 6E 00 2E 00 66 00 6F 00 72 00 6D 00 72 00 65 00 67 00 69 00 6F 00 6E 00 61 00 64 00 64 00 69 00 6E 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Search
Value name:	IndexAvailableBody
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
Value name:	000b046b
Value data:	01 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
Value name:	global_AccountsNeedResyncingWithOwnershipV5
Value data:	{"name":"AccountsNeedResyncingWithOwnershipV5","itemClass":"","id":"","scope":"global","parentSetting":"","secondaryKey":"","status":"PENDINGSYNC","type":"Bool","timestamp":0,"metadata":"","value":"false","isFirstSync":"true","source":"UserOverride"}

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
Value name:	global_AccountsNeedResyncingWithOwnershipV4
Value data:	{"name":"AccountsNeedResyncingWithOwnershipV4","itemClass":"","id":"","scope":"global","parentSetting":"","secondaryKey":"","status":"PENDINGSYNC","type":"Bool","timestamp":0,"metadata":"","value":"true","isFirstSync":"true","source":"UserOverride"}

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
Value name:	global_AccountsNeedResyncingWithOwnershipV3
Value data:	{"name":"AccountsNeedResyncingWithOwnershipV3","itemClass":"","id":"","scope":"global","parentSetting":"","secondaryKey":"","status":"PENDINGSYNC","type":"Bool","timestamp":0,"metadata":"","value":"true","isFirstSync":"true","source":"UserOverride"}

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
Value name:	global_AccountsNeedResyncingWithOwnership
Value data:	{"name":"AccountsNeedResyncingWithOwnership","itemClass":"","id":"","scope":"global","parentSetting":"","secondaryKey":"","status":"PENDINGSYNC","type":"Bool","timestamp":0,"metadata":"","value":"true","isFirstSync":"true","source":"UserOverride"}

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1033
Value data:	1498939393

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
Value name:	NULL
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1036
Value data:	1498939393

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
Value name:	NULL
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_3082
Value data:	1498939393

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\AddinClassifier
Value name:	a4922304f05a0caf296a5dab7d32866b
Value data:	v2:0;-1;1729750868

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\3517490d76624c419a828607e2a54604
Value name:	001f6000
Value data:	4E 00 6F 00 45 00 6D 00 61 00 69 00 6C 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\UserInfo
Value name:	SharingMachineID
Value data:	0E 7B 05 24 84 B0 49 41 B4 30 82 55 F5 7C C3 55

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
Value name:	000b049c
Value data:	01 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
Value name:	001f0433
Value data:	43 00 3A 00 5C 00 55 00 73 00 65 00 72 00 73 00 5C 00 66 00 72 00 6F 00 6E 00 74 00 64 00 65 00 73 00 6B 00 5C 00 41 00 70 00 70 00 44 00 61 00 74 00 61 00 5C 00 4C 00 6F 00 63 00 61 00 6C 00 5C 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 66 00 74 00 5C 00 4F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 5C 00 4E 00 6F 00 45 00 6D 00 61 00 69 00 6C 00 2E 00 73 00 68 00 61 00 72 00 69 00 6E 00 67 00 2E 00 78 00 6D 00 6C 00 2E 00 6F 00 62 00 69 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
Value name:	000b0465
Value data:	00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
Value name:	0018C00FD0066FBE
Value data:	01 00 00 00 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 E4 47 F6 7E 10 BE 11 4A AA 48 84 36 6C BA 29 9D 00 00 00 00 02 00 00 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 4E 23 7C 9C 57 6E E1 2E C4 10 5A A4 E4 91 8B 65 61 B9 2E 09 D7 A8 9B 5B 55 5F C5 E4 B1 EB 51 FF 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 35 FB 65 22 5D 60 65 BC D1 A3 4C D4 44 90 49 81 9B A6 B8 C7 7E 8E 37 04 AC CB D5 1D 23 9F 42 06 80 00 00 00 A8 28 E8 31 14 7D 69 3D 7A 90 F5 E5 6E 89 AA 49 92 C5 5F 8B 82 E4 D0 E4 04 52 BE 85 C3 35 A8 C9 53 7E A9 7F D6 D9 C1 54 7E 5F AD 40 21 79 1F 0B 88 D8 54 AA 12 A4 C8 3C 87 BE BE CC 7F 14 83 9A 35 00 FF 49 18 8A 79 26 0F 79 E2 C6 F2 7A 85 91 44 DF 09 3F 2A CC 94 A7 72 83 48 45 1B 41 C6 A9 20 88 69 E2 CA 52 31 F3 73 E6 77 41 3C DA DA 5C F1 41 BB A8 B2 BC A7 85 3C 53 DD D0 90 18 BF 0A 40 00 00 00 55 5C EF 02 10 26 0A 17 7D 42 12 AA BA D6 8C 96 9E F2 00 C4 50 AE AE 24 CB 58 0D D7 A5 1A D3 98 A1 37 BC C3 18 A8 81 F4 19 3F 4B D2 C9 9F 7C 86 96 FF 8A 44 C1 CD C4 52 53 48 B1 E5 F7 AC 51 FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
Value name:	MsaDevice
Value data:	t=GwAWAbuEBAAUbVtUa9wjWgmEIwjX9d7dccnghw8OZgAAECGTKImq6Nu0TUtWR0B8dO3gABj1n13LNhU/ccAhwC/MKCN4vktYwQ7TqWK/VRDrWkEuJ4PXd+tZRG1Kmyo9IftuHzREC1xk2W6ne375+5BOi5BHz+bKk/Ajl3oHDtymFDXOx3Ee2qNDSbPkxK8uTiF6RwZ+D1ADOM2sZSatTpUm9GJfLxllI69tSCBG/Cebq6cj7StDnbGD9663p/bX1nyc4e/w5Ad4wujU8IeCr3G0g1uVIUie6E1FhVdsiYl6NeYDiq2XBcticYXDhbKcDGxor7SzAEb7krxrO/rXiVyNrCBp6r7nSE7GfzA9zxnsyTECHwE=&p=

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9207f3e0a3b11019908b08002b2a56c2
Value name:	11023d05
Value data:	01 00 00 00 44 00 00 00 0C 00 00 00 00 00 00 00 FE 42 AA 0A 18 C7 1A 10 E8 85 0B 65 1C 24 00 00 03 00 00 00 03 00 00 00 9E 0E FA FC A6 CE 58 42 AA 5D CD B7 10 ED 9D 62 00 00 00 00 D5 DE D4 B0 5D 29 FF 4C 94 89 B4 BD D4 C7 46 8A 42 81 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\Trusted Documents
Value name:	LastPurgeTime
Value data:	28829181

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	LastRequest
Value data:	2024-10-24T06:22:06Z

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	CacheReady
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	ForceCacheRefresh
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	OnceSucceeded
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	LastUpdate
Value data:	2024-10-24T06:22:07Z

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	NextUpdate
Value data:	2024-10-31T06:22:07Z

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AuthMechanism
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	Capabilities
Value data:	8388608

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	ConnectMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	IsRemovable
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	ServiceOwner
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	SortOrder
Value data:	120

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AuthBootStrapperUri
Value data:	https://outlook.live.com/owa/wopibootstrapper

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AuthClientId
Value data:	NA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	AuthRedirectUri
Value data:	https://localhost

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	Description
Value data:	Microsoft Exchange for MSA.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	Name
Value data:	Exchange-MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	Policy
Value data:	MBI_SSL

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	ServiceId
Value data:	FP_EXCHANGE_MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	ServiceUrl
Value data:	https://localhost/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Value name:	Target
Value data:	outlook.live.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.live.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.office.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.live.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office365.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AuthMechanism
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	Capabilities
Value data:	8388608

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	ConnectMechanism
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	IsRemovable
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	ServiceOwner
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	SortOrder
Value data:	130

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AuthBootStrapperUri
Value data:	https://outlook.office365.com/owa/wopibootstrapper

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AuthClientId
Value data:	NA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	AuthRedirectUri
Value data:	https://localhost

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	Description
Value data:	Microsoft Exchange for OrgId.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	Name
Value data:	Exchange-OrgId

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	ServiceId
Value data:	FP_EXCHANGE_ORGID

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Value name:	ServiceUrl
Value data:	https://localhost/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\attachment-sdf.office.net
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook-sdf.office.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.live.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office365.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AuthMechanism
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Capabilities
Value data:	16777216

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Height
Value data:	780

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	ServiceOwner
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	SortOrder
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	SupportsNonRoaming
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Width
Value data:	540

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AuthClientId
Value data:	00000000480728C5

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AuthRedirectUri
Value data:	https://login.live.com/oauth20_desktop.srf

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AuthScope
Value data:	service::http://Passport.NET/purpose::PURPOSE_IDP_BIND

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	AuthorizationUri
Value data:	https://login.live.com/accountbind.srf?dualbind=1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Description
Value data:	Use LinkedIn to exchange information, ideas and opportunities.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Name
Value data:	LinkedIn - MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Policy
Value data:	PURPOSE_IDP_BIND

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Provider
Value data:	linkedin.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	ServiceId
Value data:	FP_LINKEDIN_2WAY_MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	ServiceUrl
Value data:	https://www.linkedin.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Value name:	Target
Value data:	http://Passport.NET/purpose

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\AuthTrustedDomains\login.live.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url20x20
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_20_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url24x24
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_24_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url40x40
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_40_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AuthMechanism
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	Capabilities
Value data:	16777216

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	Height
Value data:	780

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	ServiceOwner
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AuthClientId
Value data:	d3590ed6-52b3-4102-aeff-aad2292ab01c

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AuthRedirectUri
Value data:	urn:ietf:wg:oauth:2.0:oob

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AuthScope
Value data:	Purpose_LIbind

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	AuthorizationUri
Value data:	https://login.microsoftonline.com/{}/bind?dualbind=true&dualbindpat=true

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	Name
Value data:	LinkedIn - OrgId

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	Provider
Value data:	linkedin

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	ServiceId
Value data:	FP_LINKEDIN_2WAY_ORGID

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	ServiceUrl
Value data:	https://www.linkedin.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Value name:	TokenIssuanceUri
Value data:	urn:microsoft:purpose:LIBind

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\AuthTrustedDomains\login.microsoftonline.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url20x20
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_20_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url24x24
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_24_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url40x40
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_40_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	ServiceOwner
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	SortOrder
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	SupportsNonRoaming
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Width
Value data:	540

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AuthClientId
Value data:	00000000480728C5

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AuthRedirectUri
Value data:	https://login.live.com/oauth20_desktop.srf

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AuthScope
Value data:	service::http://Passport.NET/purpose::PURPOSE_IDP_BIND

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	AuthorizationUri
Value data:	https://login.live.com/accountbind.srf?dualbind=1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Description
Value data:	Use LinkedIn to exchange information, ideas and opportunities.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Name
Value data:	LinkedIn - MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Policy
Value data:	PURPOSE_IDP_BIND

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Provider
Value data:	linkedin.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	ServiceId
Value data:	FP_LINKEDIN_MSA

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	ServiceUrl
Value data:	https://www.linkedin.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Value name:	Target
Value data:	http://Passport.NET/purpose

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\AuthTrustedDomains\login.live.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url20x20
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_20_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url24x24
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_24_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url40x40
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_40_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	AuthMechanism
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Capabilities
Value data:	16777216

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Height
Value data:	780

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	SortOrder
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	SupportsNonRoaming
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Width
Value data:	540

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	AuthClientId
Value data:	d3590ed6-52b3-4102-aeff-aad2292ab01c

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	AuthRedirectUri
Value data:	urn:ietf:wg:oauth:2.0:oob

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	AuthScope
Value data:	Purpose_LIbind

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	AuthorizationUri
Value data:	https://login.microsoftonline.com/{}/bind?dualbind=true&dualbindpat=true

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Description
Value data:	Use LinkedIn to exchange information, ideas and opportunities.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Name
Value data:	LinkedIn - OrgId

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	Provider
Value data:	linkedin

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	ServiceId
Value data:	FP_LINKEDIN_ORGID

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	ServiceUrl
Value data:	https://www.linkedin.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Value name:	TokenIssuanceUri
Value data:	urn:microsoft:purpose:LIBind

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\AuthTrustedDomains\login.microsoftonline.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url20x20
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_20_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url24x24
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_24_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url40x40
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_40_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/linkedin_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	Capabilities
Value data:	4196355

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	ConnectMechanism
Value data:	5

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	ServiceOwner
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	SortOrder
Value data:	99

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	SupportsMultiple
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	SupportsNonRoaming
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>SharePoint Online</Type><KeyTip>S</KeyTip></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	Description
Value data:	OneDrive for Business (Mounted)

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	Name
Value data:	OneDrive for Business

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	ServiceId
Value data:	O365MOUNTED_SHAREPOINT

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Value name:	ServiceUrl
Value data:	https://www.microsoft.com/en-us/office365/online-software.aspx

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
Value name:	KeyTip
Value data:	S

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
Value name:	Type
Value data:	SharePoint Online

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_16_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_32_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_48_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	Capabilities
Value data:	16384

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	Description
Value data:	Office 365 SharePoint Group (Mounted)

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	Name
Value data:	Office 365 SharePoint

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	ServiceId
Value data:	O365MOUNTED_SHAREPOINTGROUP

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Value name:	ServiceUrl
Value data:	https://www.office.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_16_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_32_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_48_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	Capabilities
Value data:	4196355

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	ConnectMechanism
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	IsRemovable
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	SortOrder
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	Description
Value data:	SharePoint hosted on Office 365

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Value name:	ServiceId
Value data:	O365_SHAREPOINT

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	SupportsNonRoaming
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>SharePoint Online</Type><KeyTip>S</KeyTip></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	Description
Value data:	Office 365 SharePoint Group

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	Name
Value data:	Office 365 SharePoint

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	ServiceId
Value data:	O365_SHAREPOINTGROUP

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Value name:	ServiceUrl
Value data:	https://www.office.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
Value name:	KeyTip
Value data:	S

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
Value name:	Type
Value data:	SharePoint Online

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_16_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_32_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/sharepoint_48_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	Capabilities
Value data:	8193

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	ConnectMechanism
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	SortOrder
Value data:	99

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	SupportsMultiple
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>Third-Party</Type><KeyTip>D</KeyTip></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	Description
Value data:	Third Party Document Storage

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	Name
Value data:	Third Party Document Storage

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Value name:	ServiceId
Value data:	OFFOPTIN_DOCSTORAGE_LIMITED

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
Value name:	KeyTip
Value data:	D

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
Value name:	Type
Value data:	Third-Party

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	Capabilities
Value data:	2051

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	IsRemovable
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	ServiceOwner
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	SortOrder
Value data:	4

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>SharePoint</Type><KeyTip>S</KeyTip><DefaultFolderRelativePath>/Documents</DefaultFolderRelativePath></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	Description
Value data:	SharePoint hosted on premises

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	Name
Value data:	OneDrive for Business

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	ServiceId
Value data:	ONPREM_SHAREPOINT

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Value name:	ServiceUrl
Value data:	https://products.office.com/en-US/sharepoint/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
Value name:	DefaultFolderRelativePath
Value data:	/Documents

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
Value name:	Type
Value data:	SharePoint

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_16_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_32_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/onedrive_48_2.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Value name:	Capabilities
Value data:	16384

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>SharePoint</Type><KeyTip>S</KeyTip></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Value name:	Name
Value data:	SharePoint

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Value name:	ServiceId
Value data:	ONPREM_SHAREPOINTGROUP

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Value name:	Capabilities
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Value name:	CapabilitiesMetadata
Value data:	<Metadata><Type>SharePoint</Type><KeyTip>S</KeyTip><HideIfEmpty>true</HideIfEmpty></Metadata>

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Value name:	Description
Value data:	Other SharePoint sites hosted on premises

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Value name:	Name
Value data:	Other SharePoint Sites

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Value name:	ServiceId
Value data:	ONPREM_SHAREPOINT_OTHER

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Metadata
Value name:	HideIfEmpty
Value data:	true

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	AuthMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	Capabilities
Value data:	35651585

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	SortOrder
Value data:	440

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	AuthBootStrapperUri
Value data:	https://account.box.com/api/wopibootstrapper

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	AuthClientId
Value data:	em4vekradyd8j4setf04baizn2np7btj

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	AuthRedirectUri
Value data:	https://www.box.com/office/redirect

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	Description
Value data:	Box is a secure content management and collaboration platform helping teams and organizations easily share, manage, and collaborate on their most important information.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	Name
Value data:	Box

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	ServiceId
Value data:	TP_BOX_2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Value name:	ServiceUrl
Value data:	https://www.box.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\account.box-gov.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\api.box-gov.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/box/logo16.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/box/logo32.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/box/logo48.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AuthMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	Capabilities
Value data:	35651585

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	SortOrder
Value data:	730

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AuthBootStrapperUri
Value data:	https://sf-wopi2-sharefile-useast.sharefile.com/service/wopi2/wopibootstrapper

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AuthClientId
Value data:	WryxUTaZbEVCCKOjVL4JSs7TAqfKtqSL

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AuthRedirectUri
Value data:	https://secure.sharefile.com/oauth/oauthcomplete.aspx

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	AuthScope
Value data:	v3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	Description
Value data:	Add Citrix ShareFile as a location to make it easier to save Office documents to the cloud securely.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	Name
Value data:	ShareFile (Preview)

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	ServiceId
Value data:	TP_CITRIX_PLUS

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Value name:	ServiceUrl
Value data:	https://www.sharefile.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\citrixdata.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\securevdr.eu
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sharefile.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sharefilestaging.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/citrix/16.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/citrix/32.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/citrix/48.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AuthMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	Capabilities
Value data:	35651585

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	SortOrder
Value data:	400

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AuthBootStrapperUri
Value data:	https://wopi.dropbox.com/wopibootstrapper

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AuthClientId
Value data:	yr8ricy1tm3biyw

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AuthRedirectUri
Value data:	https://www.dropbox.com/ow/msft/oauth_callback

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	AuthScope
Value data:	account_info.write account_info.read files.metadata.write files.metadata.read files.content.write files.content.read sharing.write sharing.read file_requests.write file_requests.read contacts.write contacts.read

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	Description
Value data:	Dropbox offers cloud storage, file synchronization, file sharing, and client software services. The company provides solutions to securely store, synchronize and share business files. The company enables editing, adding, and transferring files across devices securely.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	Name
Value data:	Dropbox for Teams

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	ServiceId
Value data:	TP_DROPBOX_PLUS

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Value name:	ServiceUrl
Value data:	https://www.dropbox.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\api.dropbox.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\wopi.dropbox.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\www.dropbox.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/Dropbox/plus16.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/Dropbox/plus32.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/Dropbox/plus48.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AuthMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	Capabilities
Value data:	35651585

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	SortOrder
Value data:	530

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AuthBootStrapperUri
Value data:	https://us-partner-integrations.egnyte.com/msoffice/wopibootstrapper?beta

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AuthClientId
Value data:	d221f797-d1d1-4289-9a6d-d36812bc3bf1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AuthRedirectUri
Value data:	https://us-partner-integrations.egnyte.com/msoffice/authgate/intercept

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	AuthScope
Value data:	Egnyte.filesystem Egnyte.user

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	Description
Value data:	Securely access, edit, and share content stored on-premises or in the cloud, anywhere, anytime, from any device.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	Name
Value data:	Egnyte

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	ServiceId
Value data:	TP_EGNYTE_PLUS

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Value name:	ServiceUrl
Value data:	https://www.egnyte.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\integrations-prod.egnytegov.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\integrations-staging.qa-egnytegov.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\partner-integrations.egnyte.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/egnyte/egnyte_logo-16x16-1642071334.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/egnyte/egnyte_logo-32x32-1642071334.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/partner/egnyte/egnyte_logo-48x48-1642071334.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AllowsRefreshTokenAccess
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AuthMechanism
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	Capabilities
Value data:	16

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	SortOrder
Value data:	820

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AuthClientId
Value data:	445112211283-2l4cqfgb0nqep0bu135v5auv1jf548im.apps.googleusercontent.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AuthRedirectUri
Value data:	http://localhost:8011

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AuthScope
Value data:	profile email openid https://mail.google.com https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/contacts https://www.googleapis.com/auth/drive

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	AuthorizationUri
Value data:	https://accounts.google.com/o/oauth2/v2/auth

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	Description
Value data:	Connect your Google account so we can import your Gmail, allowing you to view secure content shared directly to you. You.ll also be able to send email from Outlook using your Gmail address.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	Name
Value data:	Google

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	ServiceId
Value data:	TP_GOOGLE

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	ServiceUrl
Value data:	https://www.google.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Value name:	TokenIssuanceUri
Value data:	https://www.googleapis.com/oauth2/v4/token

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AllowsRefreshTokenAccess
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AuthMechanism
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	Capabilities
Value data:	16

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	ServiceOwner
Value data:	3

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	SortOrder
Value data:	830

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	SupportsMultiple
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	SupportsNonRoaming
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AuthClientId
Value data:	445112211283-61c9mrk8i55mfr882g61p37m8j2nga3q.apps.googleusercontent.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AuthRedirectUri
Value data:	http://localhost:8011

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AuthScope
Value data:	profile email https://mail.google.com

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	AuthorizationUri
Value data:	https://accounts.google.com/o/oauth2/v2/auth

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	Description
Value data:	Connect your Google account so we can import your Gmail, allowing you to view secure content shared directly to you. You will also be able to send email from Outlook using your Gmail address.

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	Name
Value data:	Google - IMAP

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	ServiceId
Value data:	TP_GOOGLE_IMAP

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	ServiceUrl
Value data:	https://www.google.com/

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Value name:	TokenIssuanceUri
Value data:	https://www.googleapis.com/oauth2/v4/token

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\accounts.google.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\google.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\googleapis.com
Value name:	Placeholder
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Value name:	Url16x16
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_16_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Value name:	Url32x32
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_32_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Value name:	Url48x48
Value data:	https://odc.officeapps.live.com/odc/stat/images/sm/google_48_1.png

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	AccountLimit
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	AllowsRefreshTokenAccess
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	AuthMechanism
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	Capabilities
Value data:	35651585

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	ConnectMechanism
Value data:	8

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	IsManaged
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_IMANAGE_CIM
Value name:	IsRemovable
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
Value name:	6
Value data:	01 08 1B 00 00 00 00 10 00 A2 4E BB 41 02 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Logging
Value name:	NULL
Value data:	C:\Users\user~1\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241024T0220500007-4304.etl

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
Value name:	OutlookMAPI2
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-CH
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-GB
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-CH
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-GB
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\outlook
Value name:	EcsRequestPending
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
Value name:	SessionId
Value data:	BC 03 82 77 DE 3B 2A 48 BF AA 13 0A 5D 5D 8E 51

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 68 34 56 48 30 32 77 3D 22 CA 0D C2 19 00 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 68 34 56 48 30 32 77 3D 22 CA 0D C2 19 00 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109A10090400000000000F01FEC\Usage
Value name:	OutlookMAPI2Intl_1033
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
Value name:	00030429
Value data:	03 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	{ED475418-B0D6-11D2-8C3B-00104B2A6676}
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	LastChangeVer
Value data:	0D 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 68 34 56 48 30 32 77 3D 22 CA 0D C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 68 34 56 48 30 32 77 3D 22 CA 0D C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
Value name:	FilePath
Value data:	officeclient.microsoft.com\28DBC50C-3409-4EDB-9D07-7155CDF53F73

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
Value name:	StartDate
Value data:	90 38 D6 E0 DC 25 DB 01

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
Value name:	EndDate
Value data:	90 F8 3F 0B A6 26 DB 01

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
Value name:	Expires
Value data:	int64_t\|1729765254

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
Value name:	ETag
Value data:	std::wstring\|"0qsENnPTXkgKQwo5DNSBUFTzd+KxLAvGMVgym0FvOaI="

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
Value name:	RoamingConfigurableSettings
Value data:	DC 00 00 00 00 00 00 00 80 3A 09 00 41 06 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 1C 00 00 20 1C 00 00 80 51 01 00 80 51 01 00 80 51 01 00 80 51 01 00 80 F4 03 00 80 F4 03 00 80 F4 03 00 2C 01 00 00 84 03 00 00 80 51 01 00 00 00 00 00 84 03 00 00 80 51 01 00 0A 00 00 00 1E 00 00 00 1E 00 00 00 00 00 00 00 00 00 00 00 80 51 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8D 27 00 00 8D 27 00 00 8D 27 00 01 00 00 00 0A 00 00 00 80 51 01 00 00 00 30 00 00 00 30 00 00 00 30 00 00 00 00 00 84 03 00 00 80 51 01 00 1E 00 00 00 84 03 00 00 80 51 01 00 05 00 00 00 05 00 00 00 05 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
Value name:	RoamingConfigurableSettings
Value data:	DC 00 00 00 00 00 00 00 80 3A 09 00 E8 07 0A 00 04 00 18 00 06 00 14 00 39 00 72 03 00 00 00 00 00 00 00 00 00 00 00 00 20 1C 00 00 20 1C 00 00 80 51 01 00 80 51 01 00 80 51 01 00 80 51 01 00 80 F4 03 00 80 F4 03 00 80 F4 03 00 2C 01 00 00 84 03 00 00 80 51 01 00 00 00 00 00 84 03 00 00 80 51 01 00 0A 00 00 00 1E 00 00 00 1E 00 00 00 00 00 00 00 00 00 00 00 80 51 01 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8D 27 00 00 8D 27 00 00 8D 27 00 01 00 00 00 0A 00 00 00 80 51 01 00 00 00 30 00 00 00 30 00 00 00 30 00 00 00 00 00 84 03 00 00 80 51 01 00 1E 00 00 00 84 03 00 00 80 51 01 00 05 00 00 00 05 00 00 00 05 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Exchange\Forms Registry
Value name:	CacheSyncCount
Value data:	91

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	{ED475418-B0D6-11D2-8C3B-00104B2A6676}
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	LastChangeVer
Value data:	0E 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	HyphenationFiles_1033
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	HyphenationFiles_1033
Value data:	1498939395

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	HyphenationFiles_1033
Value data:	1498939396

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\ColleagueImport.ColleagueImportAddin
Value name:	LoadCount
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
Value name:	ColleagueImport.ColleagueImportAddin
Value data:	01 00 00 00 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OneNote.OutlookAddin
Value name:	LoadCount
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-CH
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-GB
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-CH
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
Value name:	en-GB
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
Value name:	OneNote.OutlookAddin
Value data:	01 00 00 00 0F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OscAddin.Connect
Value name:	LoadCount
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
Value name:	OscAddin.Connect
Value data:	01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UCAddin.LyncAddin.1
Value name:	LoadCount
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
Value name:	UCAddin.LyncAddin.1
Value data:	01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UmOutlookAddin.FormRegionAddin
Value name:	LoadCount
Value data:	2

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
Value name:	UmOutlookAddin.FormRegionAddin
Value data:	01 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 01 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\4304
Value name:	0
Value data:	0B 0E 10 64 A8 E0 0C 6A 32 BF 4F 89 B2 2B 43 73 0E F3 9B 23 00 46 8A EB 8F F7 CD BB C9 ED 01 6A 04 10 24 00 44 BB 83 01 64 A2 9D 01 00 85 00 A9 07 55 6E 6B 6E 6F 77 6E C9 06 2E 22 30 71 73 45 4E 6E 50 54 58 6B 67 4B 51 77 6F 35 44 4E 53 42 55 46 54 7A 64 2B 4B 78 4C 41 76 47 4D 56 67 79 6D 30 46 76 4F 61 49 3D 22 CA 0D 42 01 A2 00 C2 19 00 C2 1F 01 00 C5 0E 89 08 C9 10 03 78 36 34 C5 11 D0 21 D2 12 0B 6F 00 75 00 74 00 6C 00 6F 00 6F 00 6B 00 2E 00 65 00 78 00 65 00 C5 16 20 C5 17 80 80 04 C9 18 08 32 33 30 38 2D 41 75 67 CB 19 0E 10 1E 2F 47 5F 0A EB 70 41 98 E2 FB 9E 7F 6F F5 35 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\UserInfo
Value name:	CountQuickSteps
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	{ED475418-B0D6-11D2-8C3B-00104B2A6676}
Value data:	NU LL

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	LastChangeVer
Value data:	0F 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1033
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1033
Value data:	1498939395

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1036
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_1036
Value data:	1498939395

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_3082
Value data:	1498939394

Details

TargetID:	0
Path:	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
Value name:	SpellingAndGrammarFiles_3082
Value data:	1498939395

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
Value name:	LastChangeVer
Value data:	10 00 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
Value name:	DeviceTicket
Value data:	01 00 00 00 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 E4 47 F6 7E 10 BE 11 4A AA 48 84 36 6C BA 29 9D 00 00 00 00 02 00 00 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 04 30 4E A3 0A 6A 1D BD 13 C3 F4 3A D9 68 4B DA ED 7A 5A A4 C5 40 AB 6F 13 DD B9 7F CD 99 A3 83 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 BF F8 70 96 56 3D 92 2B AA 98 0D 89 3B 08 14 A9 CB 47 50 07 21 B5 B3 5B C1 18 53 19 FB 06 14 B2 F0 03 00 00 C9 A7 BE 29 7B 3D 2B 2C 04 95 69 2E 58 35 9C 63 AB A7 EA 98 E7 6D 4D 7A 55 1E BF F5 45 35 AA 64 BC 43 E3 84 76 02 0A 5A 94 8D 33 65 B6 A6 55 FC E6 69 B0 EF 0C 01 75 95 E5 42 4C EB DD EE 50 83 5C 29 C5 87 BE 26 61 3D 70 F4 E5 00 E6 53 10 8A A6 4B 5A 84 C3 F8 E8 D5 70 A0 68 10 AE 50 BE 32 C4 90 23 F5 84 E5 22 33 F0 B8 E2 7B 04 75 37 56 84 AB F8 AF F8 CD DF 31 71 69 74 11 C5 F8 3D F4 58 EB A2 A8 E1 74 77 EC 51 A2 13 6E 64 49 7B E8 44 5A 4F 81 DB B6 9A 60 A3 62 20 C2 1C E7 70 33 E4 5F 1A E8 B6 94 5F A9 D4 55 96 F5 9D 6A 62 D8 82 A2 E0 2C 4A 99 6D DF 3C EF E5 FD 34 4D 65 7A 0A 41 A8 38 52 97 16 71 C7 44 63 A8 E4 37 79 02 1B 5E 58 D7 1D 90 5F 50 8B 61 61 9B 8B 56 E3 22 76 E1 9A CC 35 03 11 14 8E 99 05 43 8E CC B8 2F 69 43 94 DD 51 C7 12 91 C9 83 40 2D 10 2E C0 3E 55 1D 1F F3 38 60 E2 C8 C5 83 54 D2 EF D0 A2 43 45 08 B9 CE 23 A4 AC 16 07 AC F2 84 72 B7 F8 38 9D 09 B9 51 5D 54 E4 57 87 42 32 61 FE 54 89 AF 10 BA 12 4E 6F 76 A9 9B 1C 54 1B 51 67 BE 02 80 15 1E 71 9E 91 E9 74 23 DC A6 F1 FA 34 8E 49 B6 F6 39 4A BD 2A D5 99 60 6E 38 E3 1C 78 BC 7A 06 0E AF 7F 16 75 38 DB 0B E3 B6 F2 FA 86 D5 D9 19 33 A5 52 24 B3 0F DC 77 FC C4 9F E8 F8 8E A3 02 C8 CF 54 32 9D C1 4E A9 0A DF FA FC 1F 62 BE 7E C6 3A 55 E0 7D F7 69 36 89 93 EE 5F CD 74 4F 5B CF 04 1A 7B B2 03 8C 25 1B 10 99 87 D9 33 AE 8E BA EF E0 34 08 25 00 9D E8 47 3C 15 28 EF 87 4D F2 FE EF 98 D2 12 39 7A 70 A6 7D D7 F0 92 5F 77 1A 94 2C 89 4F E4 05 B6 C5 0C 0F 97 24 42 FA CA 68 35 26 43 41 09 7D A1 9C B7 FA 99 9B 4D 37 4B 2A F2 10 79 13 4D F7 40 D5 2E 4F 7A 01 AB EC 21 AB A1 CE 40 C8 A3 89 1E 35 E6 EE 97 14 54 F7 8E 15 93 B5 CB 87 C6 38 07 B0 F7 C0 6F 78 DF 8D 0C 35 92 AF 77 3E B9 5B 01 A1 6D DE 8E 08 2D 8F A6 A1 7A 52 81 34 61 41 CE 06 83 CE 64 D7 C4 8F 18 23 41 DA BF 21 86 C6 AB 3B C5 90 2E 12 93 DD AC A6 3E E8 CD 9B 20 6E 54 DA CE 7E 27 6D 40 41 6D 91 35 7E 55 B5 67 D3 4E 34 1D 13 42 12 B7 D1 62 59 B4 2B A8 C8 C4 AF FA B9 43 9B E5 15 1E E7 EA 6D F7 7F F4 64 41 B2 C4 4E 54 5F C7 C3 62 05 CA EF 25 E5 CB 61 87 CB 99 C6 55 87 17 79 38 56 A3 A9 94 76 8D 67 26 5F 3D D7 BE 24 11 55 F5 D0 5E DD 99 38 D0 01 A0 2F C0 2D E9 5D 27 C9 4E 92 7E 09 17 47 D5 FD E8 F1 19 33 74 4D 8F BA F1 65 CB 6B 7E B6 C5 72 4D E9 22 68 74 B8 99 DB 9D 21 EE 69 A6 3D AE 3E 4B FC CF F7 73 B8 7A 95 AE 95 BD D5 B0 89 7E D9 83 CB 3E FD C8 CC 29 97 33 1D FA 3A 31 8D 19 0E 54 BF 25 5D 3E 2A 79 03 41 B3 E3 66 50 09 5A BA FE 91 54 7E 05 3C A9 AC 9F 64 DA 26 BB 70 71 88 A6 51 03 F3 E6 E2 EE 66 4B D2 26 07 FB 68 1E 38 56 E9 C6 49 6C 7A 09 E5 6B B0 59 5A 70 E3 BF 49 D7 46 7D DE 43 4E 8C FE D6 88 4C 80 1D 2F F2 F4 72 63 6D 3A 6A E6 E5 DC 55 25 00 BE EF 30 A5 CD 1E 1B D2 19 EB 0D 0C F8 6A 4A CE 1F A6 72 FF 80 6C 82 31 BD 25 C4 05 39 01 25 31 C5 79 DE E9 56 A8 E7 B0 FB 18 CE 7C 01 CF 06 F2 BE 71 9B D1 FB 23 24 AA 44 23 A2 E2 7D D2 51 D6 C7 BA 82 27 14 14 01 6E B1 65 BB 65 72 1F 66 CC 58 78 1A DC 26 81 6D DA 29 65 65 FB F1 58 EC 78 27 88 11 A1 F2 6F FA 1F F7 8A EF 3F EA 9D 1C 53 F6 9D BC 14 12 AD 36 91 35 1D AD 01 47 B1 94 98 95 88 47 11 D0 3A EC 3D AD 5A 36 1B 33 5E 25 E1 40 00 00 00 48 40 A1 A1 C4 42 DA 61 35 9A F8 6C 06 65 A4 18 C4 6C AB 8B CF 1E B8 52 65 2E FB 00 DA 93 9E ED F9 C6 22 AE FC E9 61 1C AE 8E 73 F3 12 95 AB 3E 94 33 10 2B 38 2A 5A AC C9 4B F5 7C D2 B9 00 FE

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
Value name:	DeviceId
Value data:	0018C00FD0066FBE

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Search\Catalog
Value name:	C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
Value data:	6C 08 00 00 00 00 00 00

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
Value name:	CacheReady
Value data:	0

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	02 00 00 00 01 00 00 00 03 00 00 00 00 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2
Value name:	MRUListEx
Value data:	01 00 00 00 00 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	NodeSlots
Value data:	02 02 02 02 02 02 02

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	00 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	02 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}
Value name:	FFlags
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	00 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	02 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2
Value name:	MRUListEx
Value data:	02 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	NodeSlots
Value data:	02 02 02 02 02 02 02 02

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	00 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{24CCB8A6-C45A-477D-B940-3382B9225668}
Value name:	FFlags
Value data:	1

Details

TargetID:	0
Path:	HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
Value name:	MRUListEx
Value data:	02 00 00 00 00 00 00 00 01 00 00 00 03 00 00 00 FF FF FF FF

Details

TargetID:	0
Path:	HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings
Value name:	Accounts
Value data:	[]

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
D. Bayham, Group #0070302, and Claim #7270930 - Support to Max.eml

Files

Processes

URLs

Domains

Registry

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC ReportD. Bayham, Group #0070302, and Claim #7270930 - Support to Max.eml

Files

Processes

URLs

Domains

Registry

IOC Report
D. Bayham, Group #0070302, and Claim #7270930 - Support to Max.eml