Timestamp Process TID Area Category EventID Level Message Correlation 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.385 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.386 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x4008 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20164", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18827.20164\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18827.20164\"}"} 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x4008 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "JDYGSaX7TUqK9qwaA/vNiA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.387 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x4008 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20164", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x4008 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20164", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x4008 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18827.20164", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.388 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x4008 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x4008 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.389 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x4008 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x4008 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x4008 Click-To-Run General Telemetry a4htr Medium ::DoUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "Triggering an update: {'Parameters':'displaylevel=False flt.useofficehelperaddon=unknown flt.useoutlookshareaddon=unknown triggersource=SCHEDULEDTASK'}"} 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.390 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.391 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.393 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.394 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.395 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "JDYGSaX7TUqK9qwaA/vNiA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 2059747D-2458-4921-95C4-49BF636D104A 06/20/2025 10:00:52.396 OFFICEC2 (0x12a4) 0x824 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 9, "Time": "2025-06-20T08:00:52Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.1.1", "Activity.Duration": 50, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "9736AC2B-94F7-4398-AAAD-E51D296A5072", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 17} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 10, "Time": "2025-06-20T08:00:52Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.6.1", "Activity.Duration": 19399, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "JDYGSaX7TUqK9qwaA/vNiA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:52.397 OFFICEC2 (0x12a4) 0x22d0 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-06-20T08:00:52Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.6", "Activity.Duration": 20277, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 06/20/2025 10:00:53.049 OFFICEC2 (0x12a4) 0x4008 Click-To-Run General Telemetry bon04 Medium ReportMachineKey {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "{\"MachineKey\":\"04145-000-000000\",\"Platform\":\"x86\",\"AppVVersion\":\"16.0.18827.20164\",\"DotNetVersions\":\"4.8.09032,3.5.30729.4926,3.0.30729.4926,2.0.50727.4927\"}"} 06/20/2025 10:00:53.050 OFFICEC2 (0x12a4) 0x4008 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18827.20164", "C2RClientVer": "16.0.18827.20164", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 06/20/2025 10:00:53.050 OFFICEC2 (0x12a4) 0x4008 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "JDYGSaX7TUqK9qwaA/vNiA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.051 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.619", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.051 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.620", "Activity.Duration": 34, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 20, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 06/20/2025 10:00:53.051 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JDYGSaX7TUqK9qwaA/vNiA.620", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.051 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 06/20/2025 10:00:53.076 OFFICEC2 (0x12a4) 0x4008 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "JDYGSaX7TUqK9qwaA/vNiA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.080 OFFICEC2 (0x12a4) 0x4008 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "JDYGSaX7TUqK9qwaA/vNiA.621", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.080 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.621", "Activity.Duration": 3507, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 06/20/2025 10:00:53.081 OFFICEC2 (0x12a4) 0x4008 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.082 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.082 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.082 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.082 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.082 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.083 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.083 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.083 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.084 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.087 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.088 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.089 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "JDYGSaX7TUqK9qwaA/vNiA.622", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18827.20164_X64_{49063624-FBA5-4A4D-8AF6-AC1A03FBCD88}"} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JDYGSaX7TUqK9qwaA/vNiA.622", "Activity.Duration": 8769, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 06/20/2025 10:00:53.090 OFFICEC2 (0x12a4) 0x4008 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 06/20/2025 10:00:53.091 OFFICEC2 (0x12a4) 0x4008 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 06/20/2025 10:00:53.092 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0} 06/20/2025 10:00:53.093 OFFICEC2 (0x12a4) 0x4008 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-06-20T08:00:53Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 80, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Performance.Detours4\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3532281Z\", \"C\" : \"34\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopReadFromGEBeforeActualizingPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableOneNoteWinCompFor2016PerpetualConsumers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3542290Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3552301Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3642386Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3672409Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3672409Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3702437Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulatePerIdentity\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3702437Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3702437Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3762498Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3772500Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ShutdownTelemetryRulesEngine\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3772500Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3772500Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3772500Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3782515Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3782515Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3782515Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExpNonBlocking\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3792528Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3812538Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3812538Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3832550Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3882599Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3882599Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3962681Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:52.3962681Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0504883Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0514886Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0772972Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0772972Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0802996Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0802996Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0802996Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0802996Z\", \"C\" : \"\", \"Q\" : 65.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0903089Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-06-20T08:00:53.0903089Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}