Timestamp Process TID Area Category EventID Level Message Correlation 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.956 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.957 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"} 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x152d4 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.958 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.959 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.960 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"4764947\"}"} 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.961 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.962 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x152d4 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 06/18/2025 08:40:27.963 OFFICEC2 (0x157e0) 0x152d4 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} EC092DF6-85C6-4806-A3E7-71A19A8A8E53 06/18/2025 08:40:27.964 OFFICEC2 (0x157e0) 0x157dc Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 10, "Time": "2025-06-18T06:40:27Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.1.1", "Activity.Duration": 38, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "28510ED6-3185-45AC-BDD2-2F2AAE7F14E0", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 14} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-06-18T06:40:27Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.619", "Activity.Duration": 27, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 14, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-18T06:40:27Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.965 OFFICEC2 (0x157e0) 0x15114 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2025-06-18T06:40:27Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.6.1", "Activity.Duration": 16536, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/18/2025 08:40:27.966 OFFICEC2 (0x157e0) 0x15114 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:27.966 OFFICEC2 (0x157e0) 0x15114 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-18T06:40:27Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.6", "Activity.Duration": 17458, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/18/2025 08:40:28.009 OFFICEC2 (0x157e0) 0x152d4 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.013 OFFICEC2 (0x157e0) 0x152d4 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.013 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-06-18T06:40:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.620", "Activity.Duration": 3840, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/18/2025 08:40:28.015 OFFICEC2 (0x157e0) 0x152d4 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.015 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.015 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.016 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.017 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.020 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.021 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.022 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "o+/Xrg3PtEiDaRcyu4XOlA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{AED7EFA3-CF0D-48B4-8369-1732BB85CE94}"} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-06-18T06:40:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "o+/Xrg3PtEiDaRcyu4XOlA.621", "Activity.Duration": 8263, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/18/2025 08:40:28.023 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/18/2025 08:40:28.024 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/18/2025 08:40:28.024 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-06-18T06:40:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0} 06/18/2025 08:40:28.026 OFFICEC2 (0x157e0) 0x152d4 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-06-18T06:40:28Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 81, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9249151Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9258917Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9268680Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9346806Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9385860Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9385860Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9405417Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9415196Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9415196Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9415196Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9473772Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9483550Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9483550Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9483550Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9483550Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9493304Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9493304Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9503073Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9522609Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9522609Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9547440Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9596273Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9596273Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9635343Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9645112Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9645112Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9645112Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:27.9654878Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0104089Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0104089Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0133385Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0133385Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0143152Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0143152Z\", \"C\" : \"\", \"Q\" : 36.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0231062Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T06:40:28.0231062Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}