Timestamp Process TID Area Category EventID Level Message Correlation 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.355 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.36", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.37", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.38", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.39", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.40", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.41", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.42", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.43", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.44", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.45", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.46", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.47", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.48", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.49", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.50", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.51", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.52", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.53", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.54", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.55", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.56", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.57", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.58", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.59", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.60", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.61", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.62", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.63", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.64", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.65", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.66", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.67", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.68", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.69", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.70", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.71", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.72", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.356 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.73", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.74", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.75", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.76", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.77", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.78", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.79", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.80", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.81", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.82", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.83", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.84", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.85", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.86", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.87", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.88", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.89", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.90", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.91", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.92", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.93", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.94", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.95", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.96", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.97", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.98", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.100", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.101", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.102", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.103", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.104", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.105", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.107", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18623.20208\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18623.20208\"}"} 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.108", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.109", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0xa68 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "TrVU0e0zVECcRP3SDUSbAw.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.111", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.112", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.357 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 05/06/2025 09:26:07.358 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.359 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.360 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"66037046\"}"} 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.361 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0xa68 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0xa68 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "TrVU0e0zVECcRP3SDUSbAw.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.362 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.363 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.364 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.366 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.367 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.368 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.369 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.370 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.371 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "TrVU0e0zVECcRP3SDUSbAw.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} ED099E1B-81FF-40BB-A25C-D2FFD161AB5A 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x158 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0xa68 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "TrVU0e0zVECcRP3SDUSbAw.306.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0xa68 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "TrVU0e0zVECcRP3SDUSbAw.306.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 10, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.306.1", "Activity.Duration": 37, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "C872FD8C-A6C3-4174-B984-23B7284D1F02", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 9} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.372 OFFICEC2 (0x2ce4) 0x26ac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0x26ac Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "TrVU0e0zVECcRP3SDUSbAw.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.616", "Activity.Duration": 33, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 12, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "TrVU0e0zVECcRP3SDUSbAw.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0x26ac Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.6.1", "Activity.Duration": 26219, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0x26ac Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "TrVU0e0zVECcRP3SDUSbAw.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.373 OFFICEC2 (0x2ce4) 0x26ac Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.6", "Activity.Duration": 27779, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 05/06/2025 09:26:07.433 OFFICEC2 (0x2ce4) 0xa68 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "TrVU0e0zVECcRP3SDUSbAw.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.440 OFFICEC2 (0x2ce4) 0xa68 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "TrVU0e0zVECcRP3SDUSbAw.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.440 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.617", "Activity.Duration": 6812, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 05/06/2025 09:26:07.443 OFFICEC2 (0x2ce4) 0xa68 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "TrVU0e0zVECcRP3SDUSbAw.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.444 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.444 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.445 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.445 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.445 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.446 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.446 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.446 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.448 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.453 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.456 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.456 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.456 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.456 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.457 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.457 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.458 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.458 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.460 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.460 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.460 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.461 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.461 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.461 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.461 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.462 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.464 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.464 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.464 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.465 OFFICEC2 (0x2ce4) 0xa68 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "TrVU0e0zVECcRP3SDUSbAw.618.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.466 OFFICEC2 (0x2ce4) 0xa68 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "TrVU0e0zVECcRP3SDUSbAw.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{D154B54E-33ED-4054-9C44-FDD20D449B03}"} 05/06/2025 09:26:07.466 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 17, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "TrVU0e0zVECcRP3SDUSbAw.618", "Activity.Duration": 22767, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 05/06/2025 09:26:07.466 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 05/06/2025 09:26:07.467 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 05/06/2025 09:26:07.474 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 05/06/2025 09:26:07.475 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 18, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 17, "Data.SecondPassCount": 0} 05/06/2025 09:26:07.478 OFFICEC2 (0x2ce4) 0xa68 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 19, "Time": "2025-05-06T07:26:07Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 79, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3159857Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3169867Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3174912Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3174912Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3184950Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.BroadcastOnAdapterSelected\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.UseGetBestAdapter\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3285043Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3295050Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3345104Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3345104Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3375121Z\", \"C\" : \"\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3375121Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3445190Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3455197Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3455197Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3465203Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3465203Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExp\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3475229Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3485223Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3495237Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3505239Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3505239Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3545292Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3545292Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3585314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3585314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3625352Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3635362Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3725440Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.3735453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4341099Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4341099Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4401147Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4401147Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4401147Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4411166Z\", \"C\" : \"\", \"Q\" : 49.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4671396Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:26:07.4681405Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}