'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-10-31 17:30:11.476516 2016-10-31 17:31:04.413244 52 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-10-31 17:30:11 2016-10-31 17:31:04

File Details

File name 240cc911820690373851423dece631049c969c1b59f99b9e888f2e890e345825
File size 649846 bytes
File type Rich Text Format data, version 1, unknown character set
CRC32 EA738936
MD5 8c06aec37c7e51f581aaa41f66d4ebad
SHA1 78c87d227407cfe0428abb149de58cb4aea6c520
SHA256 240cc911820690373851423dece631049c969c1b59f99b9e888f2e890e345825
SHA512 d0c12f31b36588e21c8e83480ef1b04fb13155d65532ca39d9f14303ab622725aac8131ee0f586da6f3d5f9bd301b5cbb695f82e4205401c79b5224f62d3a058
Ssdeep 1536:uVPJM5UT77dHkTupkn/T2Cvg4k1MPdZ9EnxS0BjfeURgkDaN2DxJ:4K5U5H8upQ/yC44Dd3EtfegaOJ
PEiD None matched
Yara None matched
VirusTotal Permalink
VirusTotal Scan Date: 2015-10-09 12:42:06
Detection Rate: 35/55 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=0, Anomalies=0, PEiD=0, Yara=0, VT[1477935073]=100): Snort Events=0, AV Events=0
Total Score=100

Signatures

No signatures matched

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

Nothing to display.

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
File-Opened
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO99LRES.DLL
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
  • C:\Program Files (x86)\Common Files\Microsoft Shared\
  • C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1033\MSOINTL.DLL
  • C:\Windows\Fonts\
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO40UIRES.DLL
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSORES.DLL
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\1033\msointl30.dll
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Cultures\OFFICE.ODF
  • C:\Program Files (x86)\Microsoft Office\root\Office16\1033\WWINTL.DLL
  • C:\Windows\AppPatch\sysmain.sdb
Directory-Enumerated
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\*.*
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16
  • C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSO.DLL
  • C:\Windows\Fonts\EUDC.TTE
Registry Key-Opened
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E48DA50A37CFB4541808027C61577613
  • HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\HangulHanjaConv
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\99E80CA9B0328e74791254777B1F42AE\InstallProperties
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38B4816825059EF5ABEFE7AC69DC237A
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEE14C3FC3FEFA3458AD37B6FB29E0F0
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AF6D649BB945143DAD2D436C434C20F
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C6B91EE7E44A8147AFEED184561DAA8
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Registration\{90160000-000F-0000-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Misc_SpsOutlookAddin
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D54092CA66F47143BC7720DEE6C1520
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F039A2C1648FC047A92BBC8A4E48197
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22ADF1C4CAEE30248811919795CE877E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F139CF91DE936230A1FA8ED33D0E0EC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8BA4DF4F75C28732903C9AC2251A33D
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Intl
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Intl
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\854320E5CD315974BB230446F54F012B
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AssistWordBackup
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\User Settings\
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06AC92CD1BDDEBC4B873F402329012C6
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Registration\{9AC08E99-230B-47e8-9721-4577B7F124EA}
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F0779EEB62935C41B1C15684211D1E1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CA503EFF8D2D6843935591226A56DB7
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\16.0\User Settings\
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD5CBA1C4F15D0A4495AFAF4ECA7D2F0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2921D0D2052C0124CA0823230A7CF03C
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0136EEA3C5C1DB040BBB4272DFA05234
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE86D47743D6EFB4F8BA1313727CB711
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3416602863-1947377224-293699093-1003\Components\0BC77486A266BF84FAE259379C82967F
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F50307A57404AD4282F43A591BABC84
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Debug
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C2D3C6C2DFB724740A4E4B0B2A54D044
  • HKEY_CURRENT_USER\Software\Microsoft\Avalon.Graphics
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CAB7071E27686994093945B9EE85F69D
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05FF053B717129E4C97F9560D8E3C885
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\InstallProperties
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Common\LanguageResources\EnabledLanguages
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\PowerPoint_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Features
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\GOM
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\379E92CC2CB71D119A12000A9CE1A22A
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A31077A24A584C4984DC332F0E08910
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3054A48C6DA69514F8A11C66A1FE4D43
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9A6F846E2818A47A408CAF13381C71
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Common\Security
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D0AC866B878B5145B6EC164ED85151B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\463248DC02BD31044AFEAB6A1D3BFBE6
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3416602863-1947377224-293699093-1003\Installer\Features\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3416602863-1947377224-293699093-1003\Installer\Products\99E80CA9B0328e74791254777B1F42AE
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Common\LanguageResources\InstalledUICultures
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8DF4AEBDD158AE438C8F2F6D20AD7AC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\CVH\VirtualProductInfo
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Data
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C80E91F77D2396F49A9B971548BEFEC8
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Vpreffuz
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Ace_OdbcCurrentUser
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E52BAFB9807F7F32B60B598A4DBB7A7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CC1F61F05EDA1948816E2A04270A20C
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B5C02588961CF8428890C980B9F3DD0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9878932B862896C45B61278195E274B1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\677C6A4AF7669584890696422D933362
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF427A2B66EB00A3182637A36261AA34
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Intl
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\Office
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\99E80CA9B0328e74791254777B1F42AE
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4531591FCEEEA847980AFCF85694A10
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\99E80CA9B0328e74791254777B1F42AE
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Core
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToWordAddin
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97FC00201A9B4EB359A592AFD9B4A1C5
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\413A5FB960BAC1A40A0B8DE39F0CB75E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEDAB3D6E7F6C2C4684D92A5E897BC1C
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F87D976C4168904EA01C6B79C7D3357
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\11ABDF44143022045A74807F2199D297
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB456C6427B5ED478C08584CF81B108
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E2C67F53B44B8E44CA78D31E45C0AEC9
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3D9924FDD5EA83546A505DA15FA902E8
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Common\LanguageResources
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\outexum
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B26B9AF8BAD890F4D8AF1B5EFAB27E4F
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_Core
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Graph_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAEB6DE731F9CE948A644F1360AC5BB3
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DD2033E784F9BE46B16A770B3DE0173
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78C18AA6E7771834FB7DE38FC605A037
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BE632C1D2D584A14BB4583F6D3E91962
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\outexum
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\035449C979B6EBD49A704ED8499CC0B7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Direct3D
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\VpreffuzWordBackup
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91911CC5AA25BA64ABAAA692E02F2D30
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3054B1CC5895B984C93AABCB18E2CB20
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Vpref
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52EF7531F13280A4DAFF25060DBF0508
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BC77486A266BF84FAE259379C82967F
  • HKEY_CURRENT_USER\Software\Microsoft\Office\Common
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8741F187B4431884F851C69EE93CCC80
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3416602863-1947377224-293699093-1003\Installer\Components\1A705E72D3831594090DD020E37EFC1A
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\Common\GOM
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\841B335EA38A88737A36C0C664FCC63C
  • HKEY_CURRENT_USER\Software\Policies
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\AccessDE_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\115682E35C354A747AB19A8B37511A7E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D82BFA0262BF08949AC6E23C8EF18003
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\648465DF56EA66345BB2567B0F873BE7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0D692E8379026B8448157BD6D7916F3E
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Graph_Core
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\Common\GOM\ComplexRanges
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C7A107880935E48BF2271B25500A01
  • HKEY_LOCAL_MACHINE\System\Setup
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5ED2E63ACCCE6D44D9F84B8D7FB73C68
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\VprefWordBackup
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToPPTAddin
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_CoreReg
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Migration\Office
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C6FF36D67277F846A233951912B7E0C
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4608B75C85EB92E4B9C78C18C52F177B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E2804C1692E9F684CACC9E114F49C8BB
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42DFE5C4C26DDA643B2E1B3484F5CFCA
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_SocialProviderMOSS
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToWordAddin
  • HKEY_CURRENT_USER\EUDC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3A1C53B88CB3F7C33B57D6B5E272B8FF
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A4601ED49F6D194998E10FA9F6C0300
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\AccessDE_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6DF6EA175C7A0240B2B10FDF2585BD1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D97A600289B46B42AC7370CB5D1432E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CD56AAE28348674E9675C463C6021D2
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39852B3E9E8B1EB48AE06D034A14262D
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\OPWBypassMigration
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Components\1A705E72D3831594090DD020E37EFC1A
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39AE6A38F56EF6C4ABAD6D350D6CFEA1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\927E2DEBBF5BEDB41A082B5356B9A495
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Graphics
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01211C777013DA94EA165EB6354C7BB3
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E7133CE0DB89F148818C6E45D79BFDC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50AD92533E1A17F4398E08E3C40D8611
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\FixedFormat
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Excel_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA7B51453E2C43343BD5241072D09F18
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45621CA8F3B53634B8B7EB70A5339EFD
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\084451265844F4A47ABA441C208BA4B1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A8F3F35080EE3E48A4E69A1726B20C9
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\492B803F9C3D84445A98619F89E031D3
  • HKEY_LOCAL_MACHINE\Software\Microsoft\DXGI
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Word_Intl
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_Core
  • HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Office
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToIEAddin
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
  • HKEY_CURRENT_USER\Keyboard Layout\Substitutes
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Debug
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CEA9EC5FEA8574EA748DE4ABC952AD
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08C0566F2C64AB248B37D78ABA9730ED
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18E39E9B8AC8A5A3EA358562C997478C
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Access_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86FDD2C8637365C489BEB6DC30E9FBB7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56CDF88E115A2914F94BA591E8FE427E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\642F24263BBA5A94FA7EB6178A2B505B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F30559A9485777D42AE55615AC729C5E
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Vprsu
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02D8650385D45DC44B6E0BF69EF2846B
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\VprsuWordBackup
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82FE3EC09B47F3A4A9C7014EBD86BC95
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_SocialConnector
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\376DDCFD80ED01249AC8112B8EE543FF
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\XDocs_XMLEditVerbHandler
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office Test\Special\Perf
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\304137362B940964CB6A957A63031F9B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CF1288ED10B63B4328E2F1739AE9A4E2
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Core
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToPPTAddin
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Direct3D\Drivers
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A9E53D7D94D36E4EA4A12EEF94D7086
  • HKEY_CURRENT_USER\Software\Microsoft\Office
  • HKEY_CURRENT_USER\EUDC\1252
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCE00C92AF70C413399B4A50F82E20B5
  • HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E40100B0F7ED50A4AABEA3DC36A2F6A6
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E584DF3B766E94F4090BF856C52425BA
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Misc_SpsOutlookAddin
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Components\1A705E72D3831594090DD020E37EFC1A
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52FCE2A887EC8E939BD4BAB1A128F53C
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\XDocs_XMLEditVerbHandler
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E29400AB2B7AA47439822EDB9310C437
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FD8D5E49CB105931B840901B2EC77A7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6D33DF58B7A854083E8402A99D91B9
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Direct3D\DX6TextureEnumInclusionList
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712CCCD0696BA1442950CA32E7C6E64D
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46FF8D92C641ED4469A6364C3DF80F53
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F303394DBB2714E4BA8BC34DF322DBD9
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3687791E032C1A747810904287441F47
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD4E638E8714C454FA1AD399C0E81909
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Wizards
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\123A732343FF9B945BE4CB85C922D77E
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C069AA2AC3DFD6A3DBF641390311FA3B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D0B3D76D8121493449064B942F126861
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE4121E3A9B6A8046B31DD1157F16447
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90ACD79B4EF140F4281AC4059348577F
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Migration\Word
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6AE1A6418D39933981921F7F7A77EA6
  • HKEY_CURRENT_USER\Software\Microsoft\Direct3D
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3416602863-1947377224-293699093-1003\Installer\Products\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7AB2F5895721D914CB4E0D8702F999A9
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E6588906D8C60C43831FCEC4BD6F719
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache\Parameters
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialProviderMOSS
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\568441CE89338D64097ACA530FE9F449
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E982B78D763473478502181932C13E0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5F07DEC661BF284EA6075DA5F525BAA
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Ace_OdbcCurrentUser
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Access_Core
  • HKEY_CURRENT_USER\Software\Microsoft\DXGI
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01B4EDCF03C143E4793454CC8B37A96D
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\WINWORD\Resiliency\StartupItems
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\PowerPoint_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED8D912A4A5CC74FA57E4C248AA17B4
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\common\filespaths
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5D24E6113CF0F848ABE77515177DCB5
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\96C59964CACA65D499A0D2D62A316FB7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49A2B0FF5E149204B8A8FF1E28D32963
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_CoreReg
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Excel_Core
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialConnector
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32F51D7A41D895849B5D36E5D0069CD8
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03682DF0978FCC64E83EB5AF9AAEBA21
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91EDD49C07CCA9B36AFAC57A43B0B9A9
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9BCF244F508B5E84D97CE5B20ED48AC1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B12F5455BBA80C849A3154420AB8F9F6
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\398CAC034AC3C4945A9E9A1914532261
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A725889A5DF965C4E84A0253A39A5952
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3416602863-1947377224-293699093-1003\Components\398CAC034AC3C4945A9E9A1914532261
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Word_Core
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B3D93E8E53F48D638B29B48233F60E14
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\740F27CC073749E4E96E7B55BE37D49A
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3422A1FF37E556F48874D71DA1A7FCBC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToIEAddin
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\(Default)
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Assist
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0C7C77C6A9753F40A5A1D4EF678DF13
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_Intl
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B76360A9B1D0AC35A81B25B36672275
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\BypassMigration
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BECCD8561A9AEEF40A4B78A2B173394D
Registry Key-Read
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\PreferredEditingLanguage
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4608B75C85EB92E4B9C78C18C52F177B\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DOT-EXTENSION
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Registration\{90160000-000F-0000-0000-0000000FF1CE}\ClickToRun
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\SnapToGrid
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\outexum\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7AB2F5895721D914CB4E0D8702F999A9\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CC1F61F05EDA1948816E2A04270A20C\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D97A600289B46B42AC7370CB5D1432E\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\NewTheme
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\FavorWord97ListIndents
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\ExeMode
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A4601ED49F6D194998E10FA9F6C0300\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE4121E3A9B6A8046B31DD1157F16447\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\ConvertDocument
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\InstallFonts
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2921D0D2052C0124CA0823230A7CF03C\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AutosaveInterval
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\t.,
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78C18AA6E7771834FB7DE38FC605A037\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E2804C1692E9F684CACC9E114F49C8BB\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\642F24263BBA5A94FA7EB6178A2B505B\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BC77486A266BF84FAE259379C82967F\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\ReadingModePrintedPage
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8DF4AEBDD158AE438C8F2F6D20AD7AC\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\115682E35C354A747AB19A8B37511A7E\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\854320E5CD315974BB230446F54F012B\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CD56AAE28348674E9675C463C6021D2\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9BCF244F508B5E84D97CE5B20ED48AC1\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Office\16.0\common\filespaths\mso.dll
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Direct3D\DX6TextureEnumInclusionList\Name
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Common\LanguageResources\SKULanguage
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6AE1A6418D39933981921F7F7A77EA6\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\System\Setup\SystemSetupInProgress
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\MarkCommentsWith
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\ReadEmailOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DefaultFormat
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DontResetInsertionPointProperties
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_SocialProviderMOSS\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49A2B0FF5E149204B8A8FF1E28D32963\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\QMEnable
  • HKEY_CURRENT_USER\Software\Microsoft\Office\Common\CodeMarkerToSqmDisable
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups\1
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712CCCD0696BA1442950CA32E7C6E64D\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\BoldFontSmoothingThreshold
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\UseOfficeUIFont
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MsoHeapInit
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Direct3D\Drivers\Name
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Core\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F30559A9485777D42AE55615AC729C5E\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Misc_SpsOutlookAddin\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52EF7531F13280A4DAFF25060DBF0508\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18E39E9B8AC8A5A3EA358562C997478C\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\MarginClipPrinting
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CF1288ED10B63B4328E2F1739AE9A4E2\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\96C59964CACA65D499A0D2D62A316FB7\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\Factoid
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32F51D7A41D895849B5D36E5D0069CD8\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToPPTAddin\Order
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\DevicePath
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06AC92CD1BDDEBC4B873F402329012C6\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\927E2DEBBF5BEDB41A082B5356B9A495\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAEB6DE731F9CE948A644F1360AC5BB3\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\KeepUnsavedChanges
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82FE3EC09B47F3A4A9C7014EBD86BC95\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\SuppressPrinterIconEnum
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\XDocs_XMLEditVerbHandler\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3A1C53B88CB3F7C33B57D6B5E272B8FF\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AF6D649BB945143DAD2D436C434C20F\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED8D912A4A5CC74FA57E4C248AA17B4\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\123A732343FF9B945BE4CB85C922D77E\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\413A5FB960BAC1A40A0B8DE39F0CB75E\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\MapStdSizes
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\376DDCFD80ED01249AC8112B8EE543FF\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Core\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\FollowSystemUILanguage
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AutoGrammar
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32\DebugHeapFlags
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B12F5455BBA80C849A3154420AB8F9F6\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\BAK-EXTENSION
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\Template
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Intl\Order
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Graph_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Intl\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C80E91F77D2396F49A9B971548BEFEC8\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F303394DBB2714E4BA8BC34DF322DBD9\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToPPTAddin\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\FontSmoothingThreshold
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\740F27CC073749E4E96E7B55BE37D49A\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\UpdateHeaderFooter
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E29400AB2B7AA47439822EDB9310C437\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\PowerPoint_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialConnector\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9A6F846E2818A47A408CAF13381C71\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\outexum\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\HelpLanguageExplicit
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\677C6A4AF7669584890696422D933362\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50AD92533E1A17F4398E08E3C40D8611\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\NewStationery
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E982B78D763473478502181932C13E0\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D0B3D76D8121493449064B942F126861\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A8F3F35080EE3E48A4E69A1726B20C9\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FD8D5E49CB105931B840901B2EC77A7\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8BA4DF4F75C28732903C9AC2251A33D\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F0779EEB62935C41B1C15684211D1E1\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToWordAddin\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0D692E8379026B8448157BD6D7916F3E\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D82BFA0262BF08949AC6E23C8EF18003\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Core\Order
  • HKEY_CURRENT_USER\Software\Microsoft\Office\Common\AllowConsecutiveSlashesInUrlPathComponent
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Ace_OdbcCurrentUser\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05FF053B717129E4C97F9560D8E3C885\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0C7C77C6A9753F40A5A1D4EF678DF13\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02D8650385D45DC44B6E0BF69EF2846B\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\UILanguageTag
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AppWindowPos
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08C0566F2C64AB248B37D78ABA9730ED\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\InsertFloating
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E40100B0F7ED50A4AABEA3DC36A2F6A6\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Intl\Order
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Access_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38B4816825059EF5ABEFE7AC69DC237A\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CAB7071E27686994093945B9EE85F69D\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToWordAddin\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage\ProductFiles
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Features\ProductFiles
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DisableODSOUIInDataSrc
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\UI Theme
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\WwlibtDll
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\00006109F00000000000000000F01FEC\ProductFiles
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Ace_OdbcCurrentUser\Order
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\ForceSetCopyCount
  • HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\ContextualSpellingWavyUnderlineColor
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE86D47743D6EFB4F8BA1313727CB711\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C2D3C6C2DFB724740A4E4B0B2A54D044\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\568441CE89338D64097ACA530FE9F449\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\00000409
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoActivateOleLinkObjAtOpen
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52FCE2A887EC8E939BD4BAB1A128F53C\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Direct3D\DLLMergeDisable
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C7A107880935E48BF2271B25500A01\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E6588906D8C60C43831FCEC4BD6F719\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_SocialConnector\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91911CC5AA25BA64ABAAA692E02F2D30\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCE00C92AF70C413399B4A50F82E20B5\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup\SourcePath
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5ED2E63ACCCE6D44D9F84B8D7FB73C68\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\UseSpaceAsTextDelimiter
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Excel_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Graph_Core\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF427A2B66EB00A3182637A36261AA34\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46FF8D92C641ED4469A6364C3DF80F53\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_Core\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3054B1CC5895B984C93AABCB18E2CB20\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\PlainTextAutoFormat
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\LangAutoDetect
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AlternateStyleCopyPasteNoOverwrite
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA7B51453E2C43343BD5241072D09F18\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E52BAFB9807F7F32B60B598A4DBB7A7\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\PowerPoint_Core\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MailSettings\ThemeFont
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E2C67F53B44B8E44CA78D31E45C0AEC9\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Intl\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Excel_Intl\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\IMEControlActive
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\LangTuneUp
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Word_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F50307A57404AD4282F43A591BABC84\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Graph_Core\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\WriteUrlWithSubitemAsBinary
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3422A1FF37E556F48874D71DA1A7FCBC\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoLiveScrolling
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\HideFileNotSavedDlg
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5F07DEC661BF284EA6075DA5F525BAA\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialProviderMOSS\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39852B3E9E8B1EB48AE06D034A14262D\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45621CA8F3B53634B8B7EB70A5339EFD\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BECCD8561A9AEEF40A4B78A2B173394D\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB456C6427B5ED478C08584CF81B108\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\OneNoteToIEAddin\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Direct3D\Drivers\Size
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B5C02588961CF8428890C980B9F3DD0\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\UserTemplates
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Access_Core\Order
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\SaveAbsolutePath4MappedDrive
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\RequireTableBordersInImage
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B3D93E8E53F48D638B29B48233F60E14\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6DF6EA175C7A0240B2B10FDF2585BD1\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01B4EDCF03C143E4793454CC8B37A96D\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3D9924FDD5EA83546A505DA15FA902E8\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F87D976C4168904EA01C6B79C7D3357\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\304137362B940964CB6A957A63031F9B\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Ace_OdbcCurrentUser\Count
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\Win31FileSystem
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\PendingUITheme
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91EDD49C07CCA9B36AFAC57A43B0B9A9\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Features\WORDFiles
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\CEIPEnable
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8741F187B4431884F851C69EE93CCC80\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Core\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9878932B862896C45B61278195E274B1\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E7133CE0DB89F148818C6E45D79BFDC\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Wizards\PageSize
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\AccessDE_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\outexum\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Direct3D\DX6TextureEnumInclusionList\Size
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6D33DF58B7A854083E8402A99D91B9\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\Common\LanguageResources\InstalledUICultures\en-us
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\AccessDE_Core\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\Common\LabMachine
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5D24E6113CF0F848ABE77515177DCB5\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\FindOptions
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToPPTAddin\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CEA9EC5FEA8574EA748DE4ABC952AD\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BE632C1D2D584A14BB4583F6D3E91962\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoClearTypeNW
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\UIFallbackLanguages
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DOC-EXTENSION
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\648465DF56EA66345BB2567B0F873BE7\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DD2033E784F9BE46B16A770B3DE0173\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\ClearTypeThreshold
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\463248DC02BD31044AFEAB6A1D3BFBE6\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Intl\Order
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToWordAddin\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\MeasurementUnits
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\CalcDataFieldOnOpen
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Data\Settings
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E584DF3B766E94F4090BF856C52425BA\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D0AC866B878B5145B6EC164ED85151B\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3054A48C6DA69514F8A11C66A1FE4D43\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97FC00201A9B4EB359A592AFD9B4A1C5\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\NoTrack
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\CEIPSampledIn
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\UISnapshotLanguages
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Word_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C6B91EE7E44A8147AFEED184561DAA8\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoSmartTagActions
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\CVH\VirtualProductInfo\PackageGUID
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39AE6A38F56EF6C4ABAD6D350D6CFEA1\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\AppRecoveryPingInterval
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C069AA2AC3DFD6A3DBF641390311FA3B\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B76360A9B1D0AC35A81B25B36672275\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\Templates
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\HelpFallbackLanguages
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3687791E032C1A747810904287441F47\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DisplayAlignmentGuides
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\CACHESIZE
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DoNotConfirmConverterSecurity
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\492B803F9C3D84445A98619F89E031D3\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialConnector\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Excel_Intl\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B26B9AF8BAD890F4D8AF1B5EFAB27E4F\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A9E53D7D94D36E4EA4A12EEF94D7086\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\s.,
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\EnableSubDocPutSaved
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22ADF1C4CAEE30248811919795CE877E\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AllowAutoReadingMode
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\11ABDF44143022045A74807F2199D297\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\AccessDE_Core\Order
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache\Parameters\ClientCacheSize
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage\WORDFiles
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\084451265844F4A47ABA441C208BA4B1\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\841B335EA38A88737A36C0C664FCC63C\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\MessageBeeps
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Misc_SpsOutlookAddin\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F139CF91DE936230A1FA8ED33D0E0EC\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F039A2C1648FC047A92BBC8A4E48197\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56CDF88E115A2914F94BA591E8FE427E\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\FieldCalcSecurityLevel
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\379E92CC2CB71D119A12000A9CE1A22A\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\KeepUISpecModeAtVbaEnd
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\XDocs_XMLEditVerbHandler\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Mso_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A725889A5DF965C4E84A0253A39A5952\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AlternateReplaceAllMethodBehaviour
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C6FF36D67277F846A233951912B7E0C\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\00006109F00000000000000000F01FEC\WORDFiles
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEDAB3D6E7F6C2C4684D92A5E897BC1C\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42DFE5C4C26DDA643B2E1B3484F5CFCA\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoTranslucentSelection
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E48DA50A37CFB4541808027C61577613\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoSmartTagRecognition
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\PreviousPreferredEditingLanguage
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Outlook_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\common\filespaths\mso.dll
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToIEAddin\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86FDD2C8637365C489BEB6DC30E9FBB7\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEE14C3FC3FEFA3458AD37B6FB29E0F0\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DontUpdateSmartDocAtInsert
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\BackgroundPrint
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Intl\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\035449C979B6EBD49A704ED8499CC0B7\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CA503EFF8D2D6843935591226A56DB7\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Outlook_SocialProviderMOSS\Order
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DontShowDocActionsPaneAtOpen
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\NoFontMRUList
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\398CAC034AC3C4945A9E9A1914532261\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\AcetatePref
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Misc_SpsOutlookAddin\Order
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ScreenReaderPresent
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\HelpLanguageTag
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0136EEA3C5C1DB040BBB4272DFA05234\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\PowerPoint_Core\Order
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD5CBA1C4F15D0A4495AFAF4ECA7D2F0\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4531591FCEEEA847980AFCF85694A10\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Word_Core\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\InstallProperties\WindowsInstaller
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\UseNTWordDefPgSzBehavior
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\UseNewHyphenator
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD4E638E8714C454FA1AD399C0E81909\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D54092CA66F47143BC7720DEE6C1520\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01211C777013DA94EA165EB6354C7BB3\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\DontJumpForegroundInDDEExec
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90ACD79B4EF140F4281AC4059348577F\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\OneNoteToIEAddin\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\User Settings\Access_Core\Count
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\UseAlternateTOCDelimiter
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A31077A24A584C4984DC332F0E08910\00006109F00000000000000000F01FEC
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\Mso_CoreReg\Count
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03682DF0978FCC64E83EB5AF9AAEBA21\00006109F00000000000000000F01FEC
  • HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Office\16.0\User Settings\XDocs_XMLEditVerbHandler\Order
Registry Key-Written
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\t.,
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US
  • HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\s.,
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage\WORDFiles
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage\ProductFiles

Processes

registry filesystem process services network synchronization

C:\Windows\system32\lsass.exe PID: 456, Parent PID: 352

"C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE" C:\Users\HARRYD~1\AppData\Local\Temp\240cc911820690373851423dece631049c969c1b59f99b9e888f2e890e345825 PID: 1592, Parent PID: 4528

Volatility

Nothing to display.