Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
05/05/2025 15:05:30.096	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.096	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.096	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.096	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.096	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.097	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.098	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.099	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run General Telemetry	aqkhc	Medium	InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18623.20208\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18623.20208\"}"}	
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "JdRZaqvaHUypImhuvUASiA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	8f5y1	Medium	WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}	
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.100	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	cfbm2	Medium	DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"}	
05/05/2025 15:05:30.101	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	8f5y1	Medium	WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}	
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.102	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	bhltg	Medium	Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}	
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.103	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run General Telemetry	a4htr	Medium	::DoUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "Triggering an update: {'Parameters':'displaylevel=False flt.useofficehelperaddon=unknown flt.useoutlookshareaddon=unknown triggersource=SCHEDULEDTASK'}"}	
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.104	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.105	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.107	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.108	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.109	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.110	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.111	OFFICEC2 (0x28e0)	0x2cc4		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "JdRZaqvaHUypImhuvUASiA.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	C43F91E8-27B9-40E4-96B8-3745DB00E45C
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x2cc4		Activity	bht56	Medium	DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 9, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.6.1.1.1", "Activity.Duration": 58, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "19D50263-2622-4DC2-964C-15F75ED3C06D", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 22}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "JdRZaqvaHUypImhuvUASiA.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.112	OFFICEC2 (0x28e0)	0x15ac		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 10, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.6.1", "Activity.Duration": 24426, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}	
05/05/2025 15:05:30.113	OFFICEC2 (0x28e0)	0x15ac		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "JdRZaqvaHUypImhuvUASiA.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.113	OFFICEC2 (0x28e0)	0x15ac		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.6", "Activity.Duration": 25352, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true}	
05/05/2025 15:05:30.850	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run General Telemetry	bon04	Medium	ReportMachineKey {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"MachineKey\":\"04145-000-000000\",\"Platform\":\"x86\",\"AppVVersion\":\"16.0.18623.20208\",\"DotNetVersions\":\"4.8.09032,3.5.30729.4926,3.0.30729.4926,2.0.50727.4927\"}"}	
05/05/2025 15:05:30.851	OFFICEC2 (0x28e0)	0x5f8c		Click-To-Run	azfea	Medium	::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"}	
05/05/2025 15:05:30.851	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "JdRZaqvaHUypImhuvUASiA.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.852	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.852	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.616", "Activity.Duration": 27, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 12, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}	
05/05/2025 15:05:30.852	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "JdRZaqvaHUypImhuvUASiA.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.853	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0}	
05/05/2025 15:05:30.904	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "JdRZaqvaHUypImhuvUASiA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.913	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "JdRZaqvaHUypImhuvUASiA.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.913	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.617", "Activity.Duration": 9538, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0}	
05/05/2025 15:05:30.915	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "JdRZaqvaHUypImhuvUASiA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.916	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.916	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.916	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.916	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.916	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.917	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.917	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.917	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.919	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.923	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.924	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.924	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.924	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.924	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.924	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.925	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.925	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.925	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.925	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.926	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.926	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.927	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.927	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.927	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.927	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.927	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.928	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.929	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "JdRZaqvaHUypImhuvUASiA.618.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.929	OFFICEC2 (0x28e0)	0x5f8c		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "JdRZaqvaHUypImhuvUASiA.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{6A59D425-DAAB-4C1D-A922-686EBD401288}"}	
05/05/2025 15:05:30.929	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "JdRZaqvaHUypImhuvUASiA.618", "Activity.Duration": 13428, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}	
05/05/2025 15:05:30.929	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	bsq69	Monitorable	Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}	
05/05/2025 15:05:30.929	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	bsq69	Monitorable	Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}	
05/05/2025 15:05:30.931	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	deasu	Medium	SLGetWindowsInformationDWORD result {"IsWCOS": false}	
05/05/2025 15:05:30.931	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0}	
05/05/2025 15:05:30.935	OFFICEC2 (0x28e0)	0x5f8c		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-05-05T13:05:30Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 79, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0615025Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0625033Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.BroadcastOnAdapterSelected\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0715117Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.UseGetBestAdapter\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0725122Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0725122Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0765161Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0765161Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0795190Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0795190Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0865267Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0875274Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0875274Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0875274Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0885285Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0895310Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExp\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0895310Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0895310Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0895310Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0905296Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0925305Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0925305Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0955331Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.0955331Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.1005403Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.1005403Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.1115520Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.1125492Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8518630Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8528641Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.8538642Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9069122Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9069122Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9139190Z\", \"C\" : \"\", \"Q\" : 20.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9139190Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9149205Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9149205Z\", \"C\" : \"\", \"Q\" : 105.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9299329Z\", \"C\" : \"\", \"Q\" : 14.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:05:30.9299329Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}