Timestamp Process TID Area Category EventID Level Message Correlation 05/05/2025 15:17:13.348 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.348 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.348 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.349 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.350 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.351 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x17c8 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18623.20208\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18623.20208\"}"} 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x17c8 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "QxrE3h+KZUa6t7Ch4kJDig.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x17c8 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.352 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x17c8 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x17c8 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.353 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x17c8 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.354 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x17c8 Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"703040\"}"} 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x17c8 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 05/05/2025 15:17:13.355 OFFICEC2 (0x2384) 0x17c8 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "QxrE3h+KZUa6t7Ch4kJDig.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.356 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.357 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "QxrE3h+KZUa6t7Ch4kJDig.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 7BDB9161-7B00-47F0-A499-8ABAEC898B82 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x3e00 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x17c8 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "QxrE3h+KZUa6t7Ch4kJDig.525.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x17c8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "QxrE3h+KZUa6t7Ch4kJDig.525.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 10, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.525.1", "Activity.Duration": 37, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "19D50263-2622-4DC2-964C-15F75ED3C06D", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 1} 05/05/2025 15:17:13.358 OFFICEC2 (0x2384) 0x2364 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x2364 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x2364 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 11, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.6.1", "Activity.Duration": 17679, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 12, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.616", "Activity.Duration": 29, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 9, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "QxrE3h+KZUa6t7Ch4kJDig.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 14, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x2364 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "QxrE3h+KZUa6t7Ch4kJDig.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.359 OFFICEC2 (0x2384) 0x2364 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.6", "Activity.Duration": 18784, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 05/05/2025 15:17:13.411 OFFICEC2 (0x2384) 0x17c8 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "QxrE3h+KZUa6t7Ch4kJDig.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.415 OFFICEC2 (0x2384) 0x17c8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "QxrE3h+KZUa6t7Ch4kJDig.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.415 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.617", "Activity.Duration": 4075, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 05/05/2025 15:17:13.416 OFFICEC2 (0x2384) 0x17c8 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.417 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.419 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.421 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.421 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.422 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.423 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.423 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.423 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.424 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.424 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.425 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.425 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.425 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.425 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.426 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.427 OFFICEC2 (0x2384) 0x17c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.427 OFFICEC2 (0x2384) 0x17c8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "QxrE3h+KZUa6t7Ch4kJDig.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{DEC41A43-8A1F-4665-BAB7-B0A1E242438A}"} 05/05/2025 15:17:13.427 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "QxrE3h+KZUa6t7Ch4kJDig.618", "Activity.Duration": 10681, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 05/05/2025 15:17:13.427 OFFICEC2 (0x2384) 0x17c8 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 05/05/2025 15:17:13.427 OFFICEC2 (0x2384) 0x17c8 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 05/05/2025 15:17:13.428 OFFICEC2 (0x2384) 0x17c8 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 05/05/2025 15:17:13.428 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0} 05/05/2025 15:17:13.430 OFFICEC2 (0x2384) 0x17c8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-05-05T13:17:13Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 79, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3176585Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3186600Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.BroadcastOnAdapterSelected\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3266660Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.UseGetBestAdapter\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3276667Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3316705Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3316705Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3336739Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3346733Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3396792Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3406784Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3406784Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3406784Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3416789Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExp\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3426802Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3436812Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3436812Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3446817Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3446817Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3476858Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3476858Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3526894Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3536906Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3556933Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3566947Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3586961Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3586961Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.3596970Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4127439Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4127439Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4157473Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4157473Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4157473Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4157473Z\", \"C\" : \"\", \"Q\" : 37.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4277575Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-05T13:17:13.4277575Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}