Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.611	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.36", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.37", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.38", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.39", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.40", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.41", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.42", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.43", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.44", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.45", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.46", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.47", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.48", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.49", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.50", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.51", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.52", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.53", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.54", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.55", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.56", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.57", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.58", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.59", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.612	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.60", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.61", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.62", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.63", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.64", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.65", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.66", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.67", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.68", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.69", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.70", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.71", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.72", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.73", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.74", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.75", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.76", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.77", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.78", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.79", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.80", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.81", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.82", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.83", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.84", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.85", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.86", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.87", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.88", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.613	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.89", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.90", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.91", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.92", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.93", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.94", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.95", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.96", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.97", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x14720		Click-To-Run General Telemetry	aqkhc	Medium	InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/update UPDATEORCHESTRATOR displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"}	
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.98", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x14720		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "OnjgzU/RuEKYRDXChhbtgw.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.100", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.101", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.102", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.103", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.104", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.105", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.107", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.108", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.109", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.111", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.112", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x14720		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.614	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x14720		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x14720		Click-To-Run General Telemetry	a4htr	Medium	::DoUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "Triggering an update: {'Parameters':'displaylevel=False flt.useofficehelperaddon=unknown flt.useoutlookshareaddon=unknown triggersource=UPDATEORCHESTRATOR'}"}	
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.615	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.616	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.617	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.618	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.619	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.620	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.621	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.621	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.621	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.621	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.621	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.623	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.624	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.625	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.626	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.627	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.628	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.629	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "OnjgzU/RuEKYRDXChhbtgw.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	98FA88C7-EA6C-4219-BE56-49EB7A9440D7
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x127a8		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x12f7c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 9, "Time": "2025-06-17T20:18:43Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.1.1", "Activity.Duration": 36, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "84C8ECF0-B27A-4A23-B731-65989B221C89", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 28}	
06/17/2025 22:18:43.630	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "OnjgzU/RuEKYRDXChhbtgw.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 10, "Time": "2025-06-17T20:18:43Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.6.1", "Activity.Duration": 31778, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "OnjgzU/RuEKYRDXChhbtgw.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:43.631	OFFICEC2 (0x147f4)	0x12f7c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-17T20:18:43Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.6", "Activity.Duration": 32756, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true}	
06/17/2025 22:18:44.292	OFFICEC2 (0x147f4)	0x14720		Click-To-Run General Telemetry	bon04	Medium	ReportMachineKey {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"MachineKey\":\"04145-000-000000\",\"Platform\":\"x86\",\"AppVVersion\":\"16.0.18827.20128\",\"DotNetVersions\":\"4.8.09032,3.5.30729.4926,3.0.30729.4926,2.0.50727.4927\"}"}	
06/17/2025 22:18:44.293	OFFICEC2 (0x147f4)	0x14720		Click-To-Run	azfea	Medium	::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'1','Result':'0'}"}	
06/17/2025 22:18:44.293	OFFICEC2 (0x147f4)	0x14720		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "OnjgzU/RuEKYRDXChhbtgw.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.294	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.294	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.619", "Activity.Duration": 32, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 16, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}	
06/17/2025 22:18:44.294	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "OnjgzU/RuEKYRDXChhbtgw.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.294	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0}	
06/17/2025 22:18:44.336	OFFICEC2 (0x147f4)	0x14720		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "OnjgzU/RuEKYRDXChhbtgw.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.342	OFFICEC2 (0x147f4)	0x14720		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "OnjgzU/RuEKYRDXChhbtgw.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.342	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.620", "Activity.Duration": 6128, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0}	
06/17/2025 22:18:44.344	OFFICEC2 (0x147f4)	0x14720		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "OnjgzU/RuEKYRDXChhbtgw.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.345	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.347	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.351	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.352	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.352	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.352	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.352	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.352	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.353	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.353	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.353	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.353	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.354	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.354	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.355	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.355	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.356	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.356	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.356	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.356	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.356	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.357	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.358	OFFICEC2 (0x147f4)	0x14720		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "OnjgzU/RuEKYRDXChhbtgw.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.358	OFFICEC2 (0x147f4)	0x14720		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "OnjgzU/RuEKYRDXChhbtgw.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{CDE0783A-D14F-42B8-9844-35C28616ED83}"}	
06/17/2025 22:18:44.358	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "OnjgzU/RuEKYRDXChhbtgw.621", "Activity.Duration": 14017, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}	
06/17/2025 22:18:44.358	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	bsq69	Monitorable	Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}	
06/17/2025 22:18:44.358	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	bsq69	Monitorable	Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}	
06/17/2025 22:18:44.360	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	deasu	Medium	SLGetWindowsInformationDWORD result {"IsWCOS": false}	
06/17/2025 22:18:44.360	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0}	
06/17/2025 22:18:44.363	OFFICEC2 (0x147f4)	0x14720		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-06-17T20:18:44Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 81, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5575169Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5584927Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5604461Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5721648Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5731415Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5809544Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5809544Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5858376Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5858376Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5868142Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5877910Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5975569Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5985330Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5995100Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5995100Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.5995100Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6004870Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6004870Z\", \"C\" : \"\", \"Q\" : 37.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6014639Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6024395Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6024395Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6043928Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6043928Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6092755Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6141585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6141585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6307642Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:43.6307642Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2937008Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2937008Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.2946765Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3372061Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3372061Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3420892Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3430660Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3430660Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3430660Z\", \"C\" : \"\", \"Q\" : 43.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3586916Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-17T20:18:44.3596678Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}