Timestamp Process TID Area Category EventID Level Message Correlation 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.42", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.43", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.44", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.45", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.46", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.47", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.48", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.49", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.50", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.51", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.52", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.53", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.54", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.55", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.56", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.57", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.58", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.59", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.60", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.61", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.62", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.429 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.63", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.64", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.65", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.66", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.67", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.68", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.69", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.70", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.71", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.72", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.73", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.74", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.75", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.76", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.77", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.78", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.79", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.80", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.81", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.82", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.83", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.84", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.85", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.86", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.87", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.88", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.89", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.90", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.91", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.92", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.430 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.93", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.94", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.95", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.96", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.97", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.98", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.100", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.101", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.102", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.103", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.104", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.105", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.107", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.108", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.109", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.111", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.112", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.431 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x13788 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/update UPDATEORCHESTRATOR displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"} 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x13788 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "YVcaJtAzEkCDu8OKKLfSGA.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x13788 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.432 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x13788 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x13788 Click-To-Run General Telemetry a4htr Medium ::DoUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "Triggering an update: {'Parameters':'displaylevel=False flt.useofficehelperaddon=unknown flt.useoutlookshareaddon=unknown triggersource=UPDATEORCHESTRATOR'}"} 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.433 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.434 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.435 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.436 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.437 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.441 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.442 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.443 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.444 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "YVcaJtAzEkCDu8OKKLfSGA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 91E73214-9720-4378-88F2-919C78719912 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x12504 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 9, "Time": "2025-06-16T22:24:49Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.1.1", "Activity.Duration": 46, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "F0382A00-8F0F-459B-8D10-52528418DDE6", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 23} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.445 OFFICEC2 (0x13290) 0x133d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 10, "Time": "2025-06-16T22:24:49Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.6.1", "Activity.Duration": 26022, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/17/2025 00:24:49.446 OFFICEC2 (0x13290) 0x133d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "YVcaJtAzEkCDu8OKKLfSGA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:49.446 OFFICEC2 (0x13290) 0x133d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-16T22:24:49Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.6", "Activity.Duration": 26976, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/17/2025 00:24:50.135 OFFICEC2 (0x13290) 0x13788 Click-To-Run General Telemetry bon04 Medium ReportMachineKey {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"MachineKey\":\"04145-000-000000\",\"Platform\":\"x86\",\"AppVVersion\":\"16.0.18827.20128\",\"DotNetVersions\":\"4.8.09032,3.5.30729.4926,3.0.30729.4926,2.0.50727.4927\"}"} 06/17/2025 00:24:50.137 OFFICEC2 (0x13290) 0x13788 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'1','Result':'0'}"} 06/17/2025 00:24:50.137 OFFICEC2 (0x13290) 0x13788 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "YVcaJtAzEkCDu8OKKLfSGA.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.138 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.138 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.619", "Activity.Duration": 36, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 18, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/17/2025 00:24:50.138 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "YVcaJtAzEkCDu8OKKLfSGA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.139 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/17/2025 00:24:50.183 OFFICEC2 (0x13290) 0x13788 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "YVcaJtAzEkCDu8OKKLfSGA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.194 OFFICEC2 (0x13290) 0x13788 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "CV": "YVcaJtAzEkCDu8OKKLfSGA.620.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.194 OFFICEC2 (0x13290) 0x13788 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "CV": "YVcaJtAzEkCDu8OKKLfSGA.620.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.194 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.620.1", "Activity.Duration": 555, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/17/2025 00:24:50.194 OFFICEC2 (0x13290) 0x13788 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "YVcaJtAzEkCDu8OKKLfSGA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.194 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 17, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.620", "Activity.Duration": 11045, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/17/2025 00:24:50.197 OFFICEC2 (0x13290) 0x13788 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.198 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.198 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.198 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.198 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.198 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.199 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.199 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.199 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.201 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.212 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.213 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.213 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.213 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.214 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.214 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.215 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.215 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.215 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.215 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.217 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.217 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.218 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.218 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.218 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.218 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.218 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.219 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.220 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.220 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.220 OFFICEC2 (0x13290) 0x13788 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.220 OFFICEC2 (0x13290) 0x13788 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "YVcaJtAzEkCDu8OKKLfSGA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{261A5761-33D0-4012-83BB-C38A28B7D218}"} 06/17/2025 00:24:50.221 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 18, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "YVcaJtAzEkCDu8OKKLfSGA.621", "Activity.Duration": 23530, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/17/2025 00:24:50.221 OFFICEC2 (0x13290) 0x13788 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/17/2025 00:24:50.221 OFFICEC2 (0x13290) 0x13788 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/17/2025 00:24:50.223 OFFICEC2 (0x13290) 0x13788 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/17/2025 00:24:50.224 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 19, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 18, "Data.SecondPassCount": 0} 06/17/2025 00:24:50.225 OFFICEC2 (0x13290) 0x13788 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 20, "Time": "2025-06-16T22:24:50Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 82, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3837368Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3847132Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3847132Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3847132Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.3856896Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4000555Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4059148Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4059148Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4093290Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4103038Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4103038Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4103038Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4187630Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4197423Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4197423Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4197423Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4197423Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4207192Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4216957Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4216957Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4216957Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4226745Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4246261Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4246261Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4271083Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4320247Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4320247Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4459687Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:49.4459687Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1370799Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1380956Z\", \"C\" : \"\", \"Q\" : 15.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1380956Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1380956Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1380956Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1380956Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1390773Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1858031Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1858031Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceTokenRefreshIntervalInSeconds\", \"V\" : 432000, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1949829Z\", \"C\" : \"33\", \"Q\" : 976.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1949829Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1949829Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1959598Z\", \"C\" : \"\", \"Q\" : 49.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.1959598Z\", \"C\" : \"\", \"Q\" : 102.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.2217490Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-16T22:24:50.2217490Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}