IOC Report
UExGQUFC.eml

loading gif

Files

File Path
Type
Category
Malicious
UExGQUFC.eml
ASCII text, with CRLF line terminators
initial sample
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\0147b8eb-b027-41e0-b76a-8001f264a9f3.tmp
JSON data
modified
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7a931e1a-67db-40e5-aceb-14653287a481.tmp
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3fe01c.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6292
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\9427729F-AD1C-40D3-AE47-D8685CFECE95
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal
SQLite Write-Ahead Log, version 3007000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress (002).dat
HTML document, Unicode text, UTF-8 text, with very long lines (4043), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress (002).dat:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress.dat
HTML document, Unicode text, UTF-8 text, with very long lines (4043), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress.dat:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{CE463161-4403-46F5-8015-7C6C2BCD85A2}.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713274414213235000_B896ADBA-D2AC-4E52-9E94-86DA10785A81.log
ASCII text, with very long lines (28763), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713274414214064300_B896ADBA-D2AC-4E52-9E94-86DA10785A81.log
data
dropped
C:\Users\user\AppData\Local\Temp\MSIecb03.LOG
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240416T1533330990-6296.etl
data
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-16 15-34-02-496.log
ASCII text, with very long lines (393)
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log
ASCII text, with very long lines (393), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\00e7f5e1-b130-492c-9403-1fd0db5cb61c.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\0e71bc74-046d-464b-9764-839b646f2ad0.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\a116a098-6b52-40cb-8e20-118209ef7be7.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\cffb3d42-924d-4ec9-aaff-1a662fbc9247.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
dropped
C:\Users\user\AppData\Local\Temp\~DF7B063B58828FFED0.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFC2C66888EB620ACA.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
data
dropped
C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
Microsoft Outlook email folder (>=2003)
dropped
C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp
data
dropped
There are 51 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\UExGQUFC.eml"
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B6CFAF67-9768-478A-97EC-AD69DD8D1A65" "FD68B694-D4A7-4F21-A5FD-B248F56890BF" "6296" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
C:\Windows\System32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress.dat"
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=1584,i,4024508962113245457,6767622392753430458,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\XFBFZ7TE\Safe Attachments Scan In Progress.dat"
C:\Windows\System32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\System32\notepad.exe
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\user\Desktop\Safe Attachments Scan In Progress.dat

URLs

Name
IP
Malicious
https://shell.suite.office.com:1443
unknown
https://autodiscover-s.outlook.com/
unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com
unknown
https://outlook.office365.com/connectors
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
https://cdn.entity.
unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
https://lookup.onenote.com/lookup/geolocation/v1
unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
https://api.aadrm.com/
unknown
https://www.yammer.com
unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
https://api.microsoftstream.com/api/
unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
https://cr.office.com
unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft
unknown
https://otelrules.svc.static.microsoft
unknown
https://edge.skype.com/registrar/prod
unknown
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
https://tasks.office.com
unknown
https://officeci.azurewebsites.net/api/
unknown
https://my.microsoftpersonalcontent.com
unknown
https://store.office.cn/addinstemplate
unknown
https://edge.skype.com/rps
unknown
https://messaging.engagement.office.com/
unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://www.odwebp.svc.ms
unknown
https://api.powerbi.com/v1.0/myorg/groups
unknown
https://web.microsoftstream.com/video/
unknown
https://api.addins.store.officeppe.com/addinstemplate
unknown
https://jsign.com/?utm_source=j2es&utm_medium=email&utm_campaign=xsell-efax-inbound
unknown
https://graph.windows.net
unknown
https://consent.config.office.com/consentcheckin/v1.0/consents
unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
https://d.docs.live.net
unknown
https://safelinks.protection.outlook.com/api/GetPolicy
unknown
https://ncus.contentsync.
unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
http://weather.service.msn.com/data.aspx
unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
https://pushchannel.1drv.ms
unknown
https://media.campaigner.com/media/45/450920/LCM092019/efax-tip-icon_fb.png
unknown
http://products.office.com/en-us/CMSImages/Office365Logo_Orange.png?version=b8d100a9-0a8b-8e6a-88e1-
unknown
https://wus2.contentsync.
unknown
https://clients.config.office.net/user/v1.0/ios
unknown
https://media.campaigner.com/media/45/450920/LCM092019/efax-ti=
unknown
https://api.addins.omex.office.net/api/addins/search
unknown
https://outlook.office365.com/api/v1.0/me/Activities
unknown
https://www.efax.com?utm_source=j2es&utm_medium=email&utm_content=logo&utm_campaign=success&j=true
unknown
https://clients.config.office.net/user/v1.0/android/policies
unknown
https://www.efax.com/contact?utm_source=3Dj2es&utm_medium=
unknown
https://entitlement.diagnostics.office.com
unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
https://outlook.office.com/
unknown
https://storage.live.com/clientlogs/uploadlocation
unknown
https://www.efax.com/login?utm_source=j2es&utm_medium=email&utm_term=click-here&utm_content=text&utm
unknown
https://login.microsoftonline.com
unknown
https://substrate.office.com/search/api/v1/SearchHistory
unknown
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
unknown
https://graph.windows.net/
unknown
https://media.campaigner.co=
unknown
https://devnull.onenote.com
unknown
https://messaging.office.com/
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
https://skyapi.live.net/Activity/
unknown
https://api.cortana.ai
unknown
https://www.efax.com?utm_source=3Dj2es&utm_medium=3Demail&utm_con=
unknown
https://messaging.action.office.com/setcampaignaction
unknown
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
https://staging.cortana.ai
unknown
https://media.campaigner.com/media/45/450920/LCM0920=
unknown
https://onedrive.live.com/embed?
unknown
https://augloop.office.com
unknown
https://api.diagnosticssdf.office.com/v2/file
unknown
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
unknown
https://officepyservice.office.net/
unknown
https://api.diagnostics.office.com
unknown
https://store.office.de/addinstemplate
unknown
https://wus2.pagecontentsync.
unknown
https://api.powerbi.com/v1.0/myorg/datasets
unknown
https://cortana.ai/api
unknown
https://api.diagnosticssdf.office.com
unknown
https://login.microsoftonline.com/
unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
https://aka.ms/vw5bpi
unknown
https://www.efax.com/sf-images=
unknown
https://api.addins.omex.office.net/appinfo/query
unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
https://powerlift.acompli.net
unknown
https://cortana.ai
unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://api.powerbi.com/v1.0/myorg/imports
unknown
https://cloudfiles.onenote.com/upload.aspx
unknown
https://entitlement.diagnosticssdf.office.com
unknown
https://media.campaigner.com/media/45/450920/LCM092019/efax-tip-icon_yt.png
unknown
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
https://ic3.teams.office.com
unknown
There are 90 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
23.54.200.159
unknown
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
CantBootResolution
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
ProfileBeingOpened
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsDataPreviousSession
BootDiagnosticsLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics
OutlookBootFlag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
l7:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
ProfileBeingOpened
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings
Accounts
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@%SystemRoot%\system32\mlang.dll,-4612
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@%SystemRoot%\system32\mlang.dll,-4608
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Wizards
PageSize
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\MailSettings
Template
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Options
WMACUpdated
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Options
DefaultKerningLigatures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
BootDiagnosticsLogFile
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Diagnostics\BootDiagnosticsData
CantBootResolution
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountSignaturesDialogOpen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
'e:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\ColleagueImport.ColleagueImportAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\Microsoft.VbaAddinForOutlook.1
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
6e:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
fe:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OscAddin.Connect
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
fe:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UCAddin.LyncAddin.1
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
ue:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\UmOutlookAddin.FormRegionAddin
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
ue:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
ue:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
ue:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Resiliency\StartupItems
ee:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
000b046b
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnershipV3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\Settings\Data
global_AccountsNeedResyncingWithOwnership
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Options\Calendar
WorkDay
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastRequest
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
ForceCacheRefresh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
OnceSucceeded
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
NextUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook-sdf.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_MSA\AuthTrustedDomains\outlook.office365.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\attachment-sdf.office.net
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook-sdf.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_EXCHANGE_ORGID\AuthTrustedDomains\outlook.office365.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\AuthTrustedDomains\login.live.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_MSA\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\AuthTrustedDomains\login.microsoftonline.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_2WAY_ORGID\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Policy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA
Target
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url20x20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_MSA\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Height
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Width
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
Provider
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url24x24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url40x40
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\FP_LINKEDIN_ORGID\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365MOUNTED_SHAREPOINTGROUP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\O365_SHAREPOINTGROUP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\OFFOPTIN_DOCSTORAGE_LIMITED\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
DefaultFolderRelativePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Metadata
KeyTip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINTGROUP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
CapabilitiesMetadata
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Metadata
HideIfEmpty
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Metadata
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\ONPREM_SHAREPOINT_OTHER\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\api.box-gov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\AuthTrustedDomains\api.box.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_BOX_2\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\securevdr.eu
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sf-api.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\AuthTrustedDomains\sharefilestaging.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_CITRIX_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\api.dropbox.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\wopi.dropbox.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\AuthTrustedDomains\www.dropbox.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_DROPBOX_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\integrations-prod.egnytegov.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\AuthTrustedDomains\us-partner-integrations.egnyte.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_EGNYTE_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\AuthTrustedDomains\accounts.google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\accounts.google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\googleapis.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\AuthTrustedDomains\mail.google.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_GOOGLE_IMAP\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AuthBootStrapperUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\AuthTrustedDomains\*.ca.opentext.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\AuthTrustedDomains\*.ot2.opentext.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\AuthTrustedDomains\*.us.opentext.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\AuthTrustedDomains\ca.opentext.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\AuthTrustedDomains\ot2.opentext.eu
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\Thumbnails
Url16x16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\Thumbnails
Url32x32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_OPENTEXT_PLUS\Thumbnails
Url48x48
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AuthMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
IsManaged
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
SupportsMultiple
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
SupportsNonRoaming
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AuthClientId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AuthRedirectUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AuthScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
AuthorizationUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
Description
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
Name
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
ServiceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
ServiceUrl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP
TokenIssuanceUri
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\TP_YAHOO_IMAP\AuthTrustedDomains\api.login.yahoo.com
Placeholder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
AccountLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
AllowsRefreshTokenAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
Capabilities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
ConnectMechanism
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
IsRemovable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
ServiceOwner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
SortOrder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog\WLINBOX_SKYDRIVE
SupportsMultiple
HKEY_CURRENT_USER_Classes
EditFlags
HKEY_CURRENT_USER_Classes\dat_auto_file
EditFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Logging
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
OutlookMAPI2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Experiment\outlook
EcsRequestPending
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109A10090400000000000F01FEC\Usage
OutlookMAPI2Intl_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\0a0d020000000000c000000000000046
00030429
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Exchange\Forms Registry
CacheSyncCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
HyphenationFiles_1033
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\ColleagueImport.ColleagueImportAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Display Types\Balloons
HWND64ForOrphanedNotIcon
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
ColleagueImport.ColleagueImportAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OneNote.OutlookAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
OneNote.OutlookAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\OscAddin.Connect
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
OscAddin.Connect
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UCAddin.LyncAddin.1
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
UCAddin.LyncAddin.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Outlook\AddinsData\UmOutlookAddin.FormRegionAddin
LoadCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\AddInLoadTimes
UmOutlookAddin.FormRegionAddin
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\UserInfo
CountQuickSteps
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
{ED475418-B0D6-11D2-8C3B-00104B2A6676}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\NoEmail\9375CFF0413111d3B88A00104B2A6676
LastChangeVer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018000DDDFEBB86
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
CacheReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Search\Catalog
C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\OUTLOOK\6296
0
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Mozilla Firefox\firefox.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Mozilla Firefox\firefox.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Internet Explorer\iexplore.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Internet Explorer\iexplore.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\mspaint.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\mspaint.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\NOTEPAD.EXE.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\NOTEPAD.EXE.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Microsoft Office\root\Office16\Winword.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Microsoft Office\root\Office16\Winword.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Windows Media Player\wmplayer.exe.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Windows Media Player\wmplayer.exe.ApplicationCompany
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE.ApplicationCompany
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice
ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice
Hash
HKEY_CURRENT_USER_Classes\.dat
NULL
HKEY_CURRENT_USER_Classes\dat_auto_file\shell\Open\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts
dat_auto_file_.dat
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithProgids
dat_auto_file
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithProgids
dat_auto_file
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
{6Q809377-6NS0-444O-8957-N3773S02200R}\Nqbor\Npebong QP\Npebong\Npebong.rkr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
HRZR_PGYFRFFVBA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\abgrcnq.rkr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithProgids
dat_auto_file
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice
ProgId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice
Hash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
HRZR_PGYFRFFVBA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Notepad
fWindowsOnlyEOL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Notepad
fPasteOriginalEOL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Notepad
fReverse
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Notepad
fWrapAround
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Notepad
fMatchCase
There are 625 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1912F2AC000
heap
page read and write
20A3BD49000
heap
page read and write
5303E7C000
stack
page read and write
20A3BC81000
heap
page read and write
20A3BD5D000
heap
page read and write
228C7A62000
heap
page read and write
20A3E46C000
heap
page read and write
20A3BCCB000
heap
page read and write
228CA308000
heap
page read and write
20A3BCCB000
heap
page read and write
20A40DE0000
heap
page read and write
20A3BD53000
heap
page read and write
20A3BC9A000
heap
page read and write
228CA2D4000
heap
page read and write
228C7B97000
heap
page read and write
20A3BD90000
heap
page read and write
228C7B5E000
heap
page read and write
228C7ACF000
heap
page read and write
228C7ABF000
heap
page read and write
20A3BDB3000
heap
page read and write
228C7AA6000
heap
page read and write
20A3BD3E000
heap
page read and write
228C7B64000
heap
page read and write
20A3BD78000
heap
page read and write
20A39E9B000
heap
page read and write
20A3BDCB000
heap
page read and write
228C7A63000
heap
page read and write
228C7AFB000
heap
page read and write
20A39E6F000
heap
page read and write
228C7B6C000
heap
page read and write
20A3BCFD000
heap
page read and write
228C7BA1000
heap
page read and write
20A40870000
heap
page readonly
228CA30B000
heap
page read and write
228CA2F6000
heap
page read and write
228C7A86000
heap
page read and write
20A3BD53000
heap
page read and write
228C7A95000
heap
page read and write
228C5B3E000
heap
page read and write
228C5B4C000
heap
page read and write
228CA2A8000
heap
page read and write
20A3BD8C000
heap
page read and write
1912F2A2000
heap
page read and write
228CA2F1000
heap
page read and write
20A3E47F000
heap
page read and write
20A3BC57000
heap
page read and write
20A3E48A000
heap
page read and write
228C7AB7000
heap
page read and write
20A3BC9A000
heap
page read and write
228C7A7D000
heap
page read and write
228C7BEF000
heap
page read and write
228C7BCF000
heap
page read and write
228C7A96000
heap
page read and write
228C7BA4000
heap
page read and write
228C7A8D000
heap
page read and write
228C7B95000
heap
page read and write
228C7BD3000
heap
page read and write
228CA2EC000
heap
page read and write
20A3BD80000
heap
page read and write
228C7A66000
heap
page read and write
228C7ADF000
heap
page read and write
228C7B75000
heap
page read and write
20A3BD7B000
heap
page read and write
20A3BC3C000
heap
page read and write
20A3BD24000
heap
page read and write
228C7AD7000
heap
page read and write
1912F25A000
heap
page read and write
20A39E75000
heap
page read and write
20A3E4A4000
heap
page read and write
228C7A9D000
heap
page read and write
228C7BA6000
heap
page read and write
20A3E45B000
heap
page read and write
228C5B6B000
heap
page read and write
228C5B09000
heap
page read and write
20A3BC67000
heap
page read and write
20A3BD66000
heap
page read and write
228C7AEB000
heap
page read and write
228C7A8D000
heap
page read and write
228C5B21000
heap
page read and write
1912F2A2000
heap
page read and write
228C7A5E000
heap
page read and write
228C7A7D000
heap
page read and write
228C7A81000
heap
page read and write
5303F7B000
stack
page read and write
228C7A66000
heap
page read and write
20A3BD88000
heap
page read and write
228C7A8A000
heap
page read and write
228C5B5F000
heap
page read and write
228C7B47000
heap
page read and write
228C7AA1000
heap
page read and write
228C7BA1000
heap
page read and write
228C7BDB000
heap
page read and write
20A3BD62000
heap
page read and write
228C7A60000
heap
page read and write
228C7B9E000
heap
page read and write
228C7A8D000
heap
page read and write
228C7A95000
heap
page read and write
228C7AE3000
heap
page read and write
228C7A88000
heap
page read and write
228CA2B8000
heap
page read and write
228C7B50000
heap
page read and write
228C7ACB000
heap
page read and write
20A39EC8000
heap
page read and write
20A39CB0000
heap
page read and write
20A3BD86000
heap
page read and write
20A3BD3B000
heap
page read and write
20A3BCC2000
heap
page read and write
228C7A91000
heap
page read and write
20A3BD66000
heap
page read and write
20A3BDA7000
heap
page read and write
228C7BDB000
heap
page read and write
228C7A8F000
heap
page read and write
20A3BD58000
heap
page read and write
228C5B28000
heap
page read and write
228C7AD3000
heap
page read and write
20A3BD6E000
heap
page read and write
228C7AA4000
heap
page read and write
228C5A30000
heap
page read and write
228C7B90000
heap
page read and write
20A3BCAA000
heap
page read and write
228C7A97000
heap
page read and write
228C7AD3000
heap
page read and write
20A3BD25000
heap
page read and write
20A3BD53000
heap
page read and write
228C7A5B000
heap
page read and write
228C5B67000
heap
page read and write
228C5B49000
heap
page read and write
20A3BD96000
heap
page read and write
228C7A95000
heap
page read and write
5303EFE000
stack
page read and write
20A39E57000
heap
page read and write
228C7AC7000
heap
page read and write
228C5B3B000
heap
page read and write
20A39EB7000
heap
page read and write
228C7AE7000
heap
page read and write
228CC0C2000
trusted library allocation
page read and write
228CC0A4000
trusted library allocation
page read and write
228C7B47000
heap
page read and write
228C7A8D000
heap
page read and write
228CA2A6000
heap
page read and write
20A3BC82000
heap
page read and write
20A3BD49000
heap
page read and write
228C7BB8000
heap
page read and write
228C5A70000
heap
page read and write
228C7AB7000
heap
page read and write
228C5B34000
heap
page read and write
228C7A8E000
heap
page read and write
228C7AEB000
heap
page read and write
20A3BC38000
heap
page read and write
20A3BD2B000
heap
page read and write
228CA311000
heap
page read and write
530427E000
stack
page read and write
20A3E4B0000
heap
page read and write
20A3E441000
heap
page read and write
19130C43000
heap
page read and write
1912F140000
heap
page read and write
20A3B820000
heap
page read and write
20A3BD43000
heap
page read and write
228CA2E5000
heap
page read and write
20A3E44F000
heap
page read and write
228C7AC3000
heap
page read and write
228C7A30000
heap
page read and write
228C7B62000
heap
page read and write
20A39E78000
heap
page read and write
228C7AB7000
heap
page read and write
228CA2B5000
heap
page read and write
228C5B22000
heap
page read and write
228C7A66000
heap
page read and write
1912F060000
heap
page read and write
228CA2F2000
heap
page read and write
20A3BDA7000
heap
page read and write
1912F228000
heap
page read and write
228C7B62000
heap
page read and write
228C5AE4000
heap
page read and write
20A3BCEA000
heap
page read and write
20A3BC78000
heap
page read and write
446DAFE000
stack
page read and write
228C7AA2000
heap
page read and write
20A3E4AB000
heap
page read and write
20A3BC9D000
heap
page read and write
228C7AB2000
heap
page read and write
228C7AA4000
heap
page read and write
20A3BD59000
heap
page read and write
4CECDFF000
stack
page read and write
228C7B40000
heap
page read and write
228C7AEF000
heap
page read and write
228C7ACF000
heap
page read and write
20A3BC44000
heap
page read and write
228C7A81000
heap
page read and write
20A3BD59000
heap
page read and write
228C7B66000
heap
page read and write
228C7BB5000
heap
page read and write
20A3BD90000
heap
page read and write
228C7C2B000
heap
page read and write
228CA308000
heap
page read and write
228C7A9A000
heap
page read and write
20A3BDA3000
heap
page read and write
228C7B6C000
heap
page read and write
228CA2FC000
heap
page read and write
20A3E486000
heap
page read and write
20A39E7C000
heap
page read and write
20A3BD54000
heap
page read and write
20A3BD53000
heap
page read and write
228C7ABF000
heap
page read and write
228C7A8E000
heap
page read and write
228C7ABB000
heap
page read and write
228C7A66000
heap
page read and write
228C7AB7000
heap
page read and write
20A3BD4D000
heap
page read and write
20A3BD9B000
heap
page read and write
228C7A7D000
heap
page read and write
20A39ECA000
heap
page read and write
228C7A70000
heap
page read and write
20A3BD72000
heap
page read and write
228C7A4F000
heap
page read and write
228C7A86000
heap
page read and write
20A3BDB3000
heap
page read and write
20A3E452000
heap
page read and write
228C5B15000
heap
page read and write
228C7A50000
heap
page read and write
20A3BD61000
heap
page read and write
228C7C0F000
heap
page read and write
20A3BCEC000
heap
page read and write
20A3BD58000
heap
page read and write
228C7AF3000
heap
page read and write
228C7A60000
heap
page read and write
228C7B9E000
heap
page read and write
20A3BC9A000
heap
page read and write
228C7A57000
heap
page read and write
20A3E450000
heap
page read and write
20A3BD44000
heap
page read and write
20A39E95000
heap
page read and write
1912F2AF000
heap
page read and write
228C7AA7000
heap
page read and write
19131380000
heap
page read and write
1912F2A6000
heap
page read and write
20A3E483000
heap
page read and write
20A3BDAF000
heap
page read and write
20A3BC4E000
heap
page read and write
20A3BD43000
heap
page read and write
1912F2A6000
heap
page read and write
228C7B95000
heap
page read and write
20A3BD69000
heap
page read and write
20A3E47F000
heap
page read and write
228CA2D6000
heap
page read and write
228C7B75000
heap
page read and write
20A39E54000
heap
page read and write
4CECCFE000
stack
page read and write
20A39ECD000
heap
page read and write
228C7B68000
heap
page read and write
228C7AA7000
heap
page read and write
228C7A5E000
heap
page read and write
228C5B26000
heap
page read and write
228C7A71000
heap
page read and write
228C5B26000
heap
page read and write
20A3BD8C000
heap
page read and write
228C7B7E000
heap
page read and write
19132C30000
trusted library allocation
page read and write
1912F2A2000
heap
page read and write
20A3BD42000
heap
page read and write
228CA311000
heap
page read and write
228C7A9D000
heap
page read and write
228C7A71000
heap
page read and write
228C7A91000
heap
page read and write
20A3E43A000
heap
page read and write
228C5B2F000
heap
page read and write
228CA2D2000
heap
page read and write
228C750E000
heap
page read and write
228C5B3C000
heap
page read and write
228C7BB5000
heap
page read and write
228C7AA2000
heap
page read and write
228C7A70000
heap
page read and write
228C7A75000
heap
page read and write
1912F2A6000
heap
page read and write
228CA2DD000
heap
page read and write
20A3BDC7000
heap
page read and write
228CA2C9000
heap
page read and write
228C7AAE000
heap
page read and write
20A3BD3E000
heap
page read and write
228C7AE7000
heap
page read and write
19130C80000
heap
page read and write
228C7A45000
heap
page read and write
20A39EBA000
heap
page read and write
20A3BCDF000
heap
page read and write
228C5B42000
heap
page read and write
228C5B2B000
heap
page read and write
228C7A5C000
heap
page read and write
228C7A62000
heap
page read and write
228C7B6C000
heap
page read and write
228C7A9D000
heap
page read and write
228C7A5C000
heap
page read and write
228C7B59000
heap
page read and write
20A3BD58000
heap
page read and write
20A3BD20000
heap
page read and write
228C7A95000
heap
page read and write
20A3E4B1000
heap
page read and write
20A3E463000
heap
page read and write
228CA2A4000
heap
page read and write
20A3E44C000
heap
page read and write
20A3BD4D000
heap
page read and write
228C7500000
heap
page read and write
228C7AAA000
heap
page read and write
228C7AA1000
heap
page read and write
20A3BD5D000
heap
page read and write
20A3E4B6000
heap
page read and write
228C7A61000
heap
page read and write
228C7B7E000
heap
page read and write
228CA6B0000
trusted library allocation
page read and write
228CA2B9000
heap
page read and write
1912F180000
heap
page read and write
20A3BD66000
heap
page read and write
20A3E4AC000
heap
page read and write
20A3BD6E000
heap
page read and write
20A3BC72000
heap
page read and write
4CECC7E000
stack
page read and write
228C7BDD000
heap
page read and write
20A39EC1000
heap
page read and write
20A3BCFD000
heap
page read and write
228C7A97000
heap
page read and write
446D57E000
stack
page read and write
1912F2A2000
heap
page read and write
228C7B30000
heap
page read and write
20A3BCF8000
heap
page read and write
228CA315000
heap
page read and write
228C7A53000
heap
page read and write
228C7AC7000
heap
page read and write
228C7AE7000
heap
page read and write
228C7C1E000
heap
page read and write
228C7AC3000
heap
page read and write
20A3BD4D000
heap
page read and write
446D77C000
stack
page read and write
446D67F000
stack
page read and write
20A3BCEA000
heap
page read and write
228C7B50000
heap
page read and write
228C7B95000
heap
page read and write
228C7A8E000
heap
page read and write
20A3BD96000
heap
page read and write
20A3BCE8000
heap
page read and write
228C5B0E000
heap
page read and write
20A3BD5D000
heap
page read and write
228C5B15000
heap
page read and write
228C7AAE000
heap
page read and write
20A3BD49000
heap
page read and write
20A3E48F000
heap
page read and write
228C7A9A000
heap
page read and write
20A3BDD3000
heap
page read and write
228CA2B1000
heap
page read and write
228C5B32000
heap
page read and write
228CA2E6000
heap
page read and write
228CA2A1000
heap
page read and write
20A39E5F000
heap
page read and write
20A3BD88000
heap
page read and write
228C7ACF000
heap
page read and write
20A3BDCF000
heap
page read and write
228C5B46000
heap
page read and write
228C7A9B000
heap
page read and write
20A3BDBB000
heap
page read and write
228CA2FA000
heap
page read and write
228C7A69000
heap
page read and write
228CA2DE000
heap
page read and write
20A3E470000
heap
page read and write
20A3BD58000
heap
page read and write
228C7C24000
heap
page read and write
5303DFF000
stack
page read and write
20A39E57000
heap
page read and write
228C7B64000
heap
page read and write
20A39E4B000
heap
page read and write
20A3BD49000
heap
page read and write
228C7A62000
heap
page read and write
20A39EBD000
heap
page read and write
228C7A81000
heap
page read and write
228C7A48000
heap
page read and write
20A39E95000
heap
page read and write
20A3E4A8000
heap
page read and write
228C7A67000
heap
page read and write
20A39E8E000
heap
page read and write
228C7A96000
heap
page read and write
228C7AEB000
heap
page read and write
4CEC94E000
stack
page read and write
20A39EA9000
heap
page read and write
20A3BCEE000
heap
page read and write
228C7A9E000
heap
page read and write
1912F2A6000
heap
page read and write
20A3E489000
heap
page read and write
20A3BD3E000
heap
page read and write
20A3BD7B000
heap
page read and write
530417B000
stack
page read and write
20A39E6C000
heap
page read and write
228C7B3A000
heap
page read and write
20A3BCF8000
heap
page read and write
5303CFE000
stack
page read and write
20A39E51000
heap
page read and write
228CA2C7000
heap
page read and write
1912F2AF000
heap
page read and write
228C7AA1000
heap
page read and write
1912F2AD000
heap
page read and write
228C7A90000
heap
page read and write
228C7A8D000
heap
page read and write
228C7A70000
heap
page read and write
20A3E44A000
heap
page read and write
20A3BD5D000
heap
page read and write
20A3BD62000
heap
page read and write
20A3BD53000
heap
page read and write
20A3BD7B000
heap
page read and write
228C7BD1000
heap
page read and write
228C7A81000
heap
page read and write
228C7A86000
heap
page read and write
228C7A88000
heap
page read and write
1912F2A2000
heap
page read and write
228C7A9D000
heap
page read and write
228CC9E0000
heap
page readonly
20A39E82000
heap
page read and write
228C7AEB000
heap
page read and write
20A3BD37000
heap
page read and write
20A3BCC7000
heap
page read and write
228C7A5A000
heap
page read and write
228C7A79000
heap
page read and write
228C7BA4000
heap
page read and write
228C7AB2000
heap
page read and write
1912F25F000
heap
page read and write
20A39E34000
heap
page read and write
228C7ABF000
heap
page read and write
228C7B68000
heap
page read and write
228C7AB7000
heap
page read and write
228C5B18000
heap
page read and write
228C7B68000
heap
page read and write
228C7BA6000
heap
page read and write
228CA2D6000
heap
page read and write
20A3BD62000
heap
page read and write
228C7BC4000
heap
page read and write
228C7B6A000
heap
page read and write
20A3BCE1000
heap
page read and write
228C5B23000
heap
page read and write
228C7A9D000
heap
page read and write
228C7B75000
heap
page read and write
228CA2AB000
heap
page read and write
20A3BC72000
heap
page read and write
228C7A81000
heap
page read and write
228C7A8D000
heap
page read and write
228C7AA3000
heap
page read and write
228C7A6A000
heap
page read and write
228C7AA4000
heap
page read and write
20A3BC10000
heap
page read and write
228C7BAC000
heap
page read and write
20A3BD76000
heap
page read and write
20A3BD49000
heap
page read and write
228C5B0E000
heap
page read and write
228C7BBA000
heap
page read and write
20A3BC6B000
heap
page read and write
20A40630000
heap
page read and write
1912F220000
heap
page read and write
20A3E463000
heap
page read and write
5303C7E000
stack
page read and write
228C5B24000
heap
page read and write
228C7A97000
heap
page read and write
20A3BCAA000
heap
page read and write
20A3BDB7000
heap
page read and write
228C7A5D000
heap
page read and write
228C7B84000
heap
page read and write
228C7BAF000
heap
page read and write
20A3BDD9000
heap
page read and write
20A3BD58000
heap
page read and write
20A3E45F000
heap
page read and write
228CA2B5000
heap
page read and write
20A3BCEE000
heap
page read and write
228C7A60000
heap
page read and write
228C7A92000
heap
page read and write
20A3BC90000
heap
page read and write
228C7A63000
heap
page read and write
228C7A4B000
heap
page read and write
446D4FE000
stack
page read and write
228C7C2D000
heap
page read and write
228C7C0F000
heap
page read and write
228C7BBD000
heap
page read and write
20A39E8B000
heap
page read and write
228C7B77000
heap
page read and write
20A3BD33000
heap
page read and write
228C7ABB000
heap
page read and write
20A3BD42000
heap
page read and write
20A3E447000
heap
page read and write
20A39E64000
heap
page read and write
20A3BC60000
heap
page read and write
228C7AB2000
heap
page read and write
228C7A70000
heap
page read and write
228C7A86000
heap
page read and write
228CA2A6000
heap
page read and write
228CA2DA000
heap
page read and write
228C5B07000
heap
page read and write
20A39E90000
heap
page read and write
228C7ABB000
heap
page read and write
228C7A51000
heap
page read and write
228C7A93000
heap
page read and write
228C7B66000
heap
page read and write
228C7ACB000
heap
page read and write
20A39E66000
heap
page read and write
20A3BD42000
heap
page read and write
228C7A66000
heap
page read and write
228C5B19000
heap
page read and write
228C7AA1000
heap
page read and write
1912F2A6000
heap
page read and write
228C7BDD000
heap
page read and write
20A3BD96000
heap
page read and write
20A3BC48000
heap
page read and write
20A39EC8000
heap
page read and write
20A3BD53000
heap
page read and write
20A39EAF000
heap
page read and write
228C7A70000
heap
page read and write
20A3BD84000
heap
page read and write
20A3E44D000
heap
page read and write
446D9FB000
stack
page read and write
228C5B08000
heap
page read and write
228C7A7D000
heap
page read and write
228CA2D2000
heap
page read and write
20A39DD0000
heap
page read and write
1912F2A6000
heap
page read and write
228C7AE7000
heap
page read and write
228C7A47000
heap
page read and write
228C7A62000
heap
page read and write
228C7AEF000
heap
page read and write
20A3BC67000
heap
page read and write
20A39E99000
heap
page read and write
228C7BD5000
heap
page read and write
20A39E93000
heap
page read and write
228C7BB1000
heap
page read and write
228C7B50000
heap
page read and write
228CA2C3000
heap
page read and write
228C5B5B000
heap
page read and write
228C5B3F000
heap
page read and write
228C5B2E000
heap
page read and write
20A3BD66000
heap
page read and write
228C7A91000
heap
page read and write
20A39EB3000
heap
page read and write
228C7AA1000
heap
page read and write
20A39ECD000
heap
page read and write
20A3BD70000
heap
page read and write
20A3E467000
heap
page read and write
228C5B13000
heap
page read and write
228C7AA2000
heap
page read and write
228CA2DA000
heap
page read and write
228CA720000
heap
page read and write
20A3E467000
heap
page read and write
228CA2C1000
heap
page read and write
446D6FD000
stack
page read and write
1912F2AD000
heap
page read and write
228C7A79000
heap
page read and write
228C7BBD000
heap
page read and write
20A39EAB000
heap
page read and write
20A3BCDE000
heap
page read and write
228C7C18000
heap
page read and write
20A39E46000
heap
page read and write
20A39E46000
heap
page read and write
20A3BCB2000
heap
page read and write
20A39E04000
heap
page read and write
228C7C1B000
heap
page read and write
228C7AD7000
heap
page read and write
228CA2DE000
heap
page read and write
228C7B50000
heap
page read and write
20A3E433000
heap
page read and write
228C7BA1000
heap
page read and write
228CA2C1000
heap
page read and write
20A3BCE1000
heap
page read and write
228C7B7E000
heap
page read and write
228C7A70000
heap
page read and write
228C5B24000
heap
page read and write
20A39ECE000
heap
page read and write
20A3BCFD000
heap
page read and write
20A3BD62000
heap
page read and write
20A3BC9A000
heap
page read and write
228C5B63000
heap
page read and write
228C750D000
heap
page read and write
20A3E4B7000
heap
page read and write
20A3BCE1000
heap
page read and write
228C7A81000
heap
page read and write
20A3E410000
heap
page read and write
20A3BDAF000
heap
page read and write
20A3BC74000
heap
page read and write
228C5A79000
heap
page read and write
20A3E42E000
heap
page read and write
228C7A41000
heap
page read and write
20A3E44A000
heap
page read and write
20A3BC8C000
heap
page read and write
228C5B30000
heap
page read and write
228CA290000
heap
page read and write
228C7B9C000
heap
page read and write
228C7AB3000
heap
page read and write
228C7B77000
heap
page read and write
20A3BD84000
heap
page read and write
19130C40000
heap
page read and write
20A39E99000
heap
page read and write
228CA311000
heap
page read and write
228C7ACB000
heap
page read and write
20A3BCEC000
heap
page read and write
20A3BD33000
heap
page read and write
20A3B755000
heap
page read and write
20A3BD5D000
heap
page read and write
20A3BDAB000
heap
page read and write
228C7A5E000
heap
page read and write
228C7A83000
heap
page read and write
20A39E5E000
heap
page read and write
228C7ADB000
heap
page read and write
20A3BDC3000
heap
page read and write
228C7B5E000
heap
page read and write
20A3BD49000
heap
page read and write
19130B00000
trusted library allocation
page read and write
20A3BC38000
heap
page read and write
228C7B56000
heap
page read and write
228C7A59000
heap
page read and write
20A39E95000
heap
page read and write
228C5B6D000
heap
page read and write
228C7A96000
heap
page read and write
228C7A6D000
heap
page read and write
20A39E62000
heap
page read and write
19130C85000
heap
page read and write
1912F2A6000
heap
page read and write
228C7BA8000
heap
page read and write
20A3BCFD000
heap
page read and write
20A3BD90000
heap
page read and write
228C7AAA000
heap
page read and write
20A3E45F000
heap
page read and write
20A3BD3E000
heap
page read and write
20A3E4B4000
heap
page read and write
20A3E44A000
heap
page read and write
228C7BCF000
heap
page read and write
446D8FB000
stack
page read and write
228C5B16000
heap
page read and write
1912F251000
heap
page read and write
228C7A9D000
heap
page read and write
20A3BC7E000
heap
page read and write
228C7B91000
heap
page read and write
228CA2DD000
heap
page read and write
20A3E492000
heap
page read and write
20A39E4A000
heap
page read and write
20A3BCAA000
heap
page read and write
20A39E80000
heap
page read and write
228C7ADF000
heap
page read and write
1912F2A2000
heap
page read and write
19130C10000
heap
page read and write
228C7A6C000
heap
page read and write
228C7ACF000
heap
page read and write
4CEC9CE000
stack
page read and write
20A3E437000
heap
page read and write
228C7A70000
heap
page read and write
20A3BDAB000
heap
page read and write
228C7B59000
heap
page read and write
20A40E22000
heap
page read and write
228C7AB7000
heap
page read and write
228C7ACB000
heap
page read and write
20A3BD5A000
heap
page read and write
20A39E99000
heap
page read and write
228C7BA4000
heap
page read and write
228C7AF3000
heap
page read and write
228C7A81000
heap
page read and write
20A39E4F000
heap
page read and write
20A3BCC7000
heap
page read and write
228C7B80000
heap
page read and write
1912F2AF000
heap
page read and write
20A3E492000
heap
page read and write
228C7B8B000
heap
page read and write
1912F276000
heap
page read and write
228C7AA1000
heap
page read and write
228C7AB7000
heap
page read and write
228C7B56000
heap
page read and write
20A3B750000
heap
page read and write
228CA2CB000
heap
page read and write
228C7A54000
heap
page read and write
228C59E0000
heap
page read and write
20A3BD20000
heap
page read and write
20A3BD3A000
heap
page read and write
228CA313000
heap
page read and write
20A39EC5000
heap
page read and write
20A3BD49000
heap
page read and write
228C7AA2000
heap
page read and write
228C9C80000
trusted library allocation
page read and write
228C5B2A000
heap
page read and write
20A3BD62000
heap
page read and write
20A3BD73000
heap
page read and write
228C7504000
heap
page read and write
228C7AD3000
heap
page read and write
20A3BD74000
heap
page read and write
228C7B95000
heap
page read and write
20A3BCF8000
heap
page read and write
20A3BCE3000
heap
page read and write
20A3BCC7000
heap
page read and write
1912F2AD000
heap
page read and write
228C7A4F000
heap
page read and write
228C5B49000
heap
page read and write
228C7AB2000
heap
page read and write
228C7ACF000
heap
page read and write
228C7A93000
heap
page read and write
228C7C15000
heap
page read and write
20A39E25000
heap
page read and write
20A3BC90000
heap
page read and write
20A39EBC000
heap
page read and write
228C7A81000
heap
page read and write
228C7AB7000
heap
page read and write
20A3BD54000
heap
page read and write
1912F26D000
heap
page read and write
228C7A84000
heap
page read and write
20A3BCF3000
heap
page read and write
20A39E46000
heap
page read and write
20A3BD49000
heap
page read and write
228C7B6C000
heap
page read and write
228C7AD7000
heap
page read and write
228C5B13000
heap
page read and write
228C7A57000
heap
page read and write
20A3BDAB000
heap
page read and write
1912F2AF000
heap
page read and write
228C7A4F000
heap
page read and write
19130C8C000
heap
page read and write
20A3BD61000
heap
page read and write
228C7B3C000
heap
page read and write
1912F2AD000
heap
page read and write
228C5B4B000
heap
page read and write
20A3BD7D000
heap
page read and write
20A39E5D000
heap
page read and write
20A3E4A8000
heap
page read and write
20A3BD43000
heap
page read and write
228CC820000
heap
page read and write
20A3E48C000
heap
page read and write
228C7B90000
heap
page read and write
228C7AFA000
heap
page read and write
20A39ECE000
heap
page read and write
228C7AD7000
heap
page read and write
20A3BCBD000
heap
page read and write
228C5B06000
heap
page read and write
228C7AF9000
heap
page read and write
228C7ADF000
heap
page read and write
20A3BC57000
heap
page read and write
228C7A75000
heap
page read and write
20A3BD4D000
heap
page read and write
228C7B88000
heap
page read and write
228C7450000
heap
page read and write
4CECD7F000
stack
page read and write
7DF42F431000
trusted library allocation
page execute read
20A3BD69000
heap
page read and write
228C7AE3000
heap
page read and write
20A3BD42000
heap
page read and write
20A40DF4000
heap
page read and write
228C7A99000
heap
page read and write
228C7BD3000
heap
page read and write
228C7BD1000
heap
page read and write
20A3BCC2000
heap
page read and write
228C7AB7000
heap
page read and write
228C59F0000
heap
page read and write
20A3BCF8000
heap
page read and write
20A3BDB3000
heap
page read and write
228C7B6A000
heap
page read and write
20A3BD58000
heap
page read and write
228C7A62000
heap
page read and write
228C7BD2000
heap
page read and write
228C7AB7000
heap
page read and write
20A3E467000
heap
page read and write
228CA2D4000
heap
page read and write
20A3BC7B000
heap
page read and write
228C7B33000
heap
page read and write
20A3BC57000
heap
page read and write
228CA2A9000
heap
page read and write
228C7AA3000
heap
page read and write
228C7C0F000
heap
page read and write
20A39E87000
heap
page read and write
228C7A67000
heap
page read and write
4CEC8C9000
stack
page read and write
228CA306000
heap
page read and write
228C7B9C000
heap
page read and write
20A3BD10000
heap
page read and write
228C7AA6000
heap
page read and write
20A3BD07000
heap
page read and write
20A3BC45000
heap
page read and write
20A3E47F000
heap
page read and write
228C7A82000
heap
page read and write
228C7B8D000
heap
page read and write
20A3BD5D000
heap
page read and write
228C5B45000
heap
page read and write
20A3BD63000
heap
page read and write
228C7A6B000
heap
page read and write
20A3E46A000
heap
page read and write
228CA2E8000
heap
page read and write
228C7A5B000
heap
page read and write
20A3BD9F000
heap
page read and write
228C5B26000
heap
page read and write
228C7B66000
heap
page read and write
228C7BBD000
heap
page read and write
20A39E4A000
heap
page read and write
228C7AA1000
heap
page read and write
228C7AD3000
heap
page read and write
228C7A63000
heap
page read and write
5303997000
stack
page read and write
20A3BC4C000
heap
page read and write
228C7A81000
heap
page read and write
20A39EBA000
heap
page read and write
228C5B30000
heap
page read and write
228C5B1A000
heap
page read and write
228C7A40000
heap
page read and write
20A3BCA5000
heap
page read and write
228C7ABB000
heap
page read and write
20A3BC67000
heap
page read and write
20A3BD0C000
heap
page read and write
228C7A57000
heap
page read and write
446D476000
stack
page read and write
20A3BD7B000
heap
page read and write
228C7A5B000
heap
page read and write
20A3BC4A000
heap
page read and write
20A3BD2F000
heap
page read and write
20A3BDBF000
heap
page read and write
20A3BDA3000
heap
page read and write
20A39E75000
heap
page read and write
228C7A81000
heap
page read and write
228C7B54000
heap
page read and write
20A3E940000
trusted library allocation
page read and write
20A3B670000
heap
page read and write
20A3E950000
heap
page read and write
228C7B54000
heap
page read and write
228C7AA2000
heap
page read and write
20A39D90000
heap
page read and write
228C7BDB000
heap
page read and write
20A3BC50000
heap
page read and write
228C5B49000
heap
page read and write
228C5B6E000
heap
page read and write
20A3BC78000
heap
page read and write
20A3BD66000
heap
page read and write
20A3BD5E000
heap
page read and write
1912F2A5000
heap
page read and write
20A3BD76000
heap
page read and write
20A3BC90000
heap
page read and write
20A3BD88000
heap
page read and write
228C5B36000
heap
page read and write
228C7A70000
heap
page read and write
228C7B90000
heap
page read and write
228C7ADF000
heap
page read and write
228C7C26000
heap
page read and write
20A3E470000
heap
page read and write
20A3BD9F000
heap
page read and write
20A3BD90000
heap
page read and write
1912F2A2000
heap
page read and write
228CA2DA000
heap
page read and write
20A3BD5D000
heap
page read and write
20A39DD9000
heap
page read and write
228C7A92000
heap
page read and write
20A3BCBA000
heap
page read and write
228CA2B1000
heap
page read and write
228CA2A2000
heap
page read and write
228CA2D2000
heap
page read and write
228C7B88000
heap
page read and write
20A3E46E000
heap
page read and write
228C7B44000
heap
page read and write
20A3BD4D000
heap
page read and write
20A3BCB2000
heap
page read and write
228C7A86000
heap
page read and write
20A3DE10000
trusted library allocation
page read and write
228C7BAF000
heap
page read and write
228C7AE3000
heap
page read and write
228C7ADB000
heap
page read and write
228CA2EC000
heap
page read and write
228C7AC7000
heap
page read and write
20A3BCB4000
heap
page read and write
228C7B60000
heap
page read and write
228C7A66000
heap
page read and write
228C7B88000
heap
page read and write
20A39EBC000
heap
page read and write
228C7A79000
heap
page read and write
228C7A9D000
heap
page read and write
1912F2AD000
heap
page read and write
228C7B6A000
heap
page read and write
228C7A75000
heap
page read and write
228C7A66000
heap
page read and write
228C7BAD000
heap
page read and write
228C7AD3000
heap
page read and write
446D5FD000
stack
page read and write
20A39E65000
heap
page read and write
20A3BD30000
heap
page read and write
228C7A5E000
heap
page read and write
20A3E46E000
heap
page read and write
20A3E4B1000
heap
page read and write
20A3BD63000
heap
page read and write
20A3BC38000
heap
page read and write
20A3BC8B000
heap
page read and write
228C7ACF000
heap
page read and write
20A39E56000
heap
page read and write
20A3BD84000
heap
page read and write
20A3BC70000
heap
page read and write
228C7A41000
heap
page read and write
228C5B67000
heap
page read and write
228C7A81000
heap
page read and write
1912F2A2000
heap
page read and write
228C7A82000
heap
page read and write
228C5B38000
heap
page read and write
5303D7E000
stack
page read and write
20A39E4A000
heap
page read and write
228C5B45000
heap
page read and write
20A39E4C000
heap
page read and write
228CA2D0000
heap
page read and write
228C7A70000
heap
page read and write
20A3BD5D000
heap
page read and write
228C7A95000
heap
page read and write
228C7A96000
heap
page read and write
20A39E54000
heap
page read and write
228C7A47000
heap
page read and write
There are 887 hidden memdumps, click here to show them.