Timestamp Process TID Area Category EventID Level Message Correlation 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.262 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.263 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xfa18 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/WatchService\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"} 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xfa18 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "8nFMF/EbukyZXlyt2mrrZA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xfa18 Click-To-Run aznhv Medium ClientMonitor::Monitor - Start ServiceWatcher watcher. 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xfa18 Click-To-Run General Telemetry aznhc Medium ServiceWatcher::DoWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ServiceWatcher::DoWatch - Service is running."} 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.264 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xfa18 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.Watcher", "CV": "8nFMF/EbukyZXlyt2mrrZA.314.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xfa18 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.Watcher", "CV": "8nFMF/EbukyZXlyt2mrrZA.314.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.265 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xfa18 Click-To-Run General Telemetry bgodb Medium ServiceWatcher::SendMachineInfoState {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'ProductInfoInstalled','ProPlus2019Retail.16_x-none_pl-pl','OfficeBitness','x86','WERMachineID',''}"} 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xfa18 Click-To-Run General Telemetry a232l Medium Watcher::Watch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "Watcher is running successfully. {'WatcherName':'ServiceWatcher'}"} 06/16/2025 06:33:48.266 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xfa18 Click-To-Run General Telemetry auqvk Medium MonitoredScope::ExecuteUnderStopWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "Watcher::Watch - Watching ServiceWatcher.Approximate duration : 0 milliseconds."} 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.267 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.268 OFFICEC2 (0xf974) 0xfa18 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"} 06/16/2025 06:33:48.268 OFFICEC2 (0xf974) 0xfa18 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "8nFMF/EbukyZXlyt2mrrZA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.269 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.270 OFFICEC2 (0xf974) 0xc574 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "8nFMF/EbukyZXlyt2mrrZA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 2EE75300-A7CC-4CE7-9296-494408174C86 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xc574 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "8nFMF/EbukyZXlyt2mrrZA.531.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "8nFMF/EbukyZXlyt2mrrZA.531.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.531.1", "Activity.Duration": 44, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "F0382A00-8F0F-459B-8D10-52528418DDE6", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 1} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "8nFMF/EbukyZXlyt2mrrZA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 12, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.619", "Activity.Duration": 23, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 10, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "8nFMF/EbukyZXlyt2mrrZA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0x11108 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.6.1", "Activity.Duration": 16794, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/16/2025 06:33:48.271 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 14, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/16/2025 06:33:48.272 OFFICEC2 (0xf974) 0x11108 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "8nFMF/EbukyZXlyt2mrrZA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.272 OFFICEC2 (0xf974) 0x11108 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 16, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.6", "Activity.Duration": 18175, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/16/2025 06:33:48.298 OFFICEC2 (0xf974) 0xfa18 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "8nFMF/EbukyZXlyt2mrrZA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.302 OFFICEC2 (0xf974) 0xfa18 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "8nFMF/EbukyZXlyt2mrrZA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.302 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 17, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.620", "Activity.Duration": 4080, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/16/2025 06:33:48.304 OFFICEC2 (0xf974) 0xfa18 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "8nFMF/EbukyZXlyt2mrrZA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.305 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.307 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.312 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.313 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.313 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.314 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.314 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.314 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.314 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.315 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.315 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.316 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.316 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.316 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.316 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.316 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "8nFMF/EbukyZXlyt2mrrZA.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "8nFMF/EbukyZXlyt2mrrZA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{174C71F2-1BF1-4CBA-995E-5CADDA6AEB64}"} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 18, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "8nFMF/EbukyZXlyt2mrrZA.621", "Activity.Duration": 14269, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/16/2025 06:33:48.317 OFFICEC2 (0xf974) 0xfa18 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/16/2025 06:33:48.319 OFFICEC2 (0xf974) 0xfa18 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/16/2025 06:33:48.319 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 19, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 18, "Data.SecondPassCount": 0} 06/16/2025 06:33:48.321 OFFICEC2 (0xf974) 0xfa18 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 20, "Time": "2025-06-16T04:33:48Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 79, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2307538Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2317297Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2327071Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2405507Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2444560Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2444560Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2473868Z\", \"C\" : \"\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2473868Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2473868Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2483622Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2532463Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2542217Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2542217Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2542217Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2542217Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2551982Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2551982Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2561753Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2581284Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2581284Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2600831Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2688712Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2698472Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2708242Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2718004Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2991465Z\", \"C\" : \"33\", \"Q\" : 976.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.2991465Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3020757Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3020757Z\", \"C\" : \"\", \"Q\" : 16.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3020757Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3020757Z\", \"C\" : \"\", \"Q\" : 46.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3186785Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T04:33:48.3186785Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}