Timestamp Process TID Area Category EventID Level Message Correlation 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.798 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.36", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.37", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.38", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.39", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.40", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.41", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.42", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.43", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.44", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.45", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.46", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.47", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.48", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.49", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.50", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.51", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.52", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.53", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.54", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.55", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.56", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.57", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.58", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.59", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.60", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.61", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.62", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.63", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.64", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.65", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.66", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.67", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.68", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.69", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.70", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.71", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.72", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.73", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.74", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.75", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.76", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.77", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.78", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.79", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.80", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.81", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.799 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.82", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.83", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.84", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.85", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.86", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.87", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.88", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.89", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.90", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.91", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.92", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.93", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.94", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.95", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.96", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.97", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.98", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.100", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.101", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.102", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.103", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.104", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/WatchService\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"} 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.105", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x9e58 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "4bSRJ4KWWU24s/u8eFApoA.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.107", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.108", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.109", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.111", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.112", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run aznhv Medium ClientMonitor::Monitor - Start ServiceWatcher watcher. 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.800 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run General Telemetry aznhc Medium ServiceWatcher::DoWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ServiceWatcher::DoWatch - Service is running."} 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.801 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x9e58 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.Watcher", "CV": "4bSRJ4KWWU24s/u8eFApoA.106.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x9e58 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.Watcher", "CV": "4bSRJ4KWWU24s/u8eFApoA.106.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run General Telemetry bgodb Medium ServiceWatcher::SendMachineInfoState {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'ProductInfoInstalled','ProPlus2019Retail.16_x-none_pl-pl','OfficeBitness','x86','WERMachineID',''}"} 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.802 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run General Telemetry a232l Medium Watcher::Watch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "Watcher is running successfully. {'WatcherName':'ServiceWatcher'}"} 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run General Telemetry auqvk Medium MonitoredScope::ExecuteUnderStopWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "Watcher::Watch - Watching ServiceWatcher.Approximate duration : 0 milliseconds."} 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.803 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x9e58 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"} 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x9e58 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "4bSRJ4KWWU24s/u8eFApoA.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.804 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.805 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.806 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.807 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.808 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.809 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.810 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x12cec Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "4bSRJ4KWWU24s/u8eFApoA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} ED95022B-B6AD-468A-8B44-07144D4E2339 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x12cec Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "4bSRJ4KWWU24s/u8eFApoA.330.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "4bSRJ4KWWU24s/u8eFApoA.330.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.330.1", "Activity.Duration": 38, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "84C8ECF0-B27A-4A23-B731-65989B221C89", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 7} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "4bSRJ4KWWU24s/u8eFApoA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x1354 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.6.1", "Activity.Duration": 20926, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 13, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.619", "Activity.Duration": 22, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 9, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "4bSRJ4KWWU24s/u8eFApoA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.811 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/17/2025 06:33:48.812 OFFICEC2 (0x11a90) 0x1354 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "4bSRJ4KWWU24s/u8eFApoA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.812 OFFICEC2 (0x11a90) 0x1354 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 16, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.6", "Activity.Duration": 21918, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/17/2025 06:33:48.838 OFFICEC2 (0x11a90) 0x9e58 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "4bSRJ4KWWU24s/u8eFApoA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.842 OFFICEC2 (0x11a90) 0x9e58 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "4bSRJ4KWWU24s/u8eFApoA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.842 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 17, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.620", "Activity.Duration": 3782, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/17/2025 06:33:48.843 OFFICEC2 (0x11a90) 0x9e58 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "4bSRJ4KWWU24s/u8eFApoA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.844 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.845 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.847 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.847 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.848 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.849 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.849 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.849 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.849 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.850 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "4bSRJ4KWWU24s/u8eFApoA.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "4bSRJ4KWWU24s/u8eFApoA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{2791B4E1-9682-4D59-B8B3-FBBC785029A0}"} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 18, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "4bSRJ4KWWU24s/u8eFApoA.621", "Activity.Duration": 8485, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/17/2025 06:33:48.851 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/17/2025 06:33:48.852 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/17/2025 06:33:48.852 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 19, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 18, "Data.SecondPassCount": 0} 06/17/2025 06:33:48.853 OFFICEC2 (0x11a90) 0x9e58 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 20, "Time": "2025-06-17T04:33:48Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 79, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7678672Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7688438Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7776327Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7815391Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7815391Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7844691Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7844691Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7844691Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7844691Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7893520Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7903297Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7903297Z\", \"C\" : \"\", \"Q\" : 13.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7903297Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7903297Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7913052Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7913052Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7913052Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7922819Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7932595Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7932595Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7932595Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.7971646Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8040016Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8040016Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8118135Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8391597Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8391597Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8420880Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8420880Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8420880Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8420880Z\", \"C\" : \"\", \"Q\" : 51.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8518577Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T04:33:48.8518577Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}