Timestamp Process TID Area Category EventID Level Message Correlation 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.654 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.655 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.656 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.657 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.658 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x13530 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20128\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20128\"}"} 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x13530 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.659 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.660 OFFICEC2 (0x13804) 0x13530 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.661 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x13530 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.662 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x13530 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20128", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.663 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x13530 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.664 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.665 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x13530 Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"6118650\"}"} 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.666 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.667 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.668 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.668 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.668 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.668 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.669 OFFICEC2 (0x13804) 0x13530 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20128", "C2RClientVer": "16.0.18827.20128", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 06/18/2025 09:03:01.669 OFFICEC2 (0x13804) 0x13530 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.685 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.686 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.687 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.688 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.689 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.690 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.691 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.692 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.693 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x6b0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} C63E84EE-E15D-4941-89D1-B7290AED735F 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x6b0 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x13530 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.474.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x13530 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.474.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 10, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.474.1", "Activity.Duration": 64, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "28510ED6-3185-45AC-BDD2-2F2AAE7F14E0", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 23} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x1481c Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.694 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.619", "Activity.Duration": 32, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 12, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/18/2025 09:03:01.695 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.695 OFFICEC2 (0x13804) 0x1481c Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.6.1", "Activity.Duration": 53181, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/18/2025 09:03:01.695 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/18/2025 09:03:01.695 OFFICEC2 (0x13804) 0x1481c Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.695 OFFICEC2 (0x13804) 0x1481c Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.6", "Activity.Duration": 54879, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/18/2025 09:03:01.891 OFFICEC2 (0x13804) 0x13530 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.924 OFFICEC2 (0x13804) 0x13530 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.924 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-06-18T07:03:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.620", "Activity.Duration": 32625, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/18/2025 09:03:01.928 OFFICEC2 (0x13804) 0x13530 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.935 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.936 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.938 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.940 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.940 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.947 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.948 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.948 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.967 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.988 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.989 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.989 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.989 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.989 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:01.989 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.004 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.005 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.005 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.006 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.007 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.007 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.009 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.009 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.010 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.010 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.010 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.012 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.012 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.012 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "dw7V/e3K3U2mH/Xkrk/uVA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20128_X64_{FDD50E77-CAED-4DDD-A61F-F5E4AE4FEE54}"} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-06-18T07:03:02Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "dw7V/e3K3U2mH/Xkrk/uVA.621", "Activity.Duration": 85532, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/18/2025 09:03:02.013 OFFICEC2 (0x13804) 0x13530 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/18/2025 09:03:02.016 OFFICEC2 (0x13804) 0x13530 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/18/2025 09:03:02.017 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-06-18T07:03:02Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0} 06/18/2025 09:03:02.045 OFFICEC2 (0x13804) 0x13530 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-06-18T07:03:02Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 81, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6052670Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6062440Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6062440Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6081967Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6208912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6257750Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6257750Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6296805Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6296805Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6296805Z\", \"C\" : \"\", \"Q\" : 25.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.TridentTelemetryKernelbaseLoadLibrary2\", \"V\" : false, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6316335Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6394462Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6404224Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6413992Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6413992Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6413992Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6433527Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6443296Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6443296Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6453064Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6453064Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6462824Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6492132Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6492132Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6521431Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6619115Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6628886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6697238Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6707005Z\", \"C\" : \"\", \"Q\" : 16.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6946711Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.6956473Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.8949745Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.8949745Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.9242718Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.9242718Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.9252486Z\", \"C\" : \"\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:01.9252486Z\", \"C\" : \"\", \"Q\" : 81.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-18T07:03:02.0136800Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-18T07:03:02.0146560Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}