Timestamp Process TID Area Category EventID Level Message Correlation 05/06/2025 09:56:59.278 OFFICEC2 (0x6510) 0x6b40 WebServiceApi 4qhrn Medium [ServiceRequest] Cache Data Found and Callback for data requested {"CacheKey": "https://officeclient.microsoft.com/config16/?syslcid=1045&build=16.0.18623&crev=3", "DataSize": 183961} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.36", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.37", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.38", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.39", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.40", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.41", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.42", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.43", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.44", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.45", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.46", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.47", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.48", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.49", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.50", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.51", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.52", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.53", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.54", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.282 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.55", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.56", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.57", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.58", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.59", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.60", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.61", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.62", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.63", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.64", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.65", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.66", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.67", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.68", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.69", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.70", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.71", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.72", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.73", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.74", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.75", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.76", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.77", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.78", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.79", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.80", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.81", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.82", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.83", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.84", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.85", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.86", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.87", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.88", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.89", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.90", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.91", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.92", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.93", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.94", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.95", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.96", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.97", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.98", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.99", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.100", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.101", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.102", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.103", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.104", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.105", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.106", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.107", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.108", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.109", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.110", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.283 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.111", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.112", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.113", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.114", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.115", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.116", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.117", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.118", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.119", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.120", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.121", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.122", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.123", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.124", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.125", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.126", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.127", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.128", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.129", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.130", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.131", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.132", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.133", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.134", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.135", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.136", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.137", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.138", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.139", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x66a8 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18623.20208", "ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18623.20208\",\"CommandLine\":\"/WatchService\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\":\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\":\"9\",\"Locale\":\"1045\",\"AppVVersion\":\"16.0.18623.20208\"}"} 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.140", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.142", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x66a8 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "wfd+keEiP0aSxWDWz/Nomg.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.143", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.144", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.145", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.146", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.147", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.148", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.149", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x66a8 Click-To-Run aznhv Medium ClientMonitor::Monitor - Start ServiceWatcher watcher. 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.150", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.151", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.152", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.153", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.154", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.155", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.156", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.157", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.158", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.159", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.160", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.161", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.162", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.163", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.164", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.165", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.166", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.167", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.168", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.169", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.170", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.171", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.172", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.173", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.174", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.284 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.175", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.176", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.177", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.178", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.179", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.180", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.181", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.182", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.183", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.184", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.185", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.186", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.187", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.188", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x66a8 Click-To-Run General Telemetry aznhc Medium ServiceWatcher::DoWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "ServiceWatcher::DoWatch - Service is running."} 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.189", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.190", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.191", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.192", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.193", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.194", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.195", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.196", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.197", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.198", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.199", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.200", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.201", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.202", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.203", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.204", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.205", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.206", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.207", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.208", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.209", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.210", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.211", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.212", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.213", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.214", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.285 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.215", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.216", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.217", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.218", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.219", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.220", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.221", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.222", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.223", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.224", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.225", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.226", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.227", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.228", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.229", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.230", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.231", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.232", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.233", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.234", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.235", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x66a8 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.Watcher", "CV": "wfd+keEiP0aSxWDWz/Nomg.141.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.236", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.237", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x66a8 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.Watcher", "CV": "wfd+keEiP0aSxWDWz/Nomg.141.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.238", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.239", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.240", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.241", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.242", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.243", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.244", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.245", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.246", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.247", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.248", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.249", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.250", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.251", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.252", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.253", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.254", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.255", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.256", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.257", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.258", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.259", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.260", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.261", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.262", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.263", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.264", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.265", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.266", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.267", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.286 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.268", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.269", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.270", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.271", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.272", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.273", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.274", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.275", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.276", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.277", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.278", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.279", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.280", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.281", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x66a8 Click-To-Run General Telemetry bgodb Medium ServiceWatcher::SendMachineInfoState {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "{'ProductInfoInstalled','ProPlus2019Retail.16_x-none_pl-pl','OfficeBitness','x86','WERMachineID',''}"} 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.282", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.283", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.284", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.285", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.286", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.287", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.288", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.289", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.290", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.291", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.292", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.293", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.294", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.295", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.296", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.297", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.298", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.299", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.300", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.301", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.302", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.303", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.304", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.305", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.306", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.307", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.308", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.309", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.310", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.311", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.312", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.313", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.314", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.315", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.316", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.317", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.318", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.319", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.320", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.287 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.321", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.322", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.323", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.324", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.325", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.326", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.327", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.328", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.329", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.330", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.331", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.332", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.333", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.334", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.335", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.336", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.337", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.338", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.339", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.340", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.341", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x66a8 Click-To-Run General Telemetry a232l Medium Watcher::Watch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "Watcher is running successfully. {'WatcherName':'ServiceWatcher'}"} 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.342", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.343", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.344", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.345", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.346", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.347", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.348", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.349", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.350", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.351", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.352", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.353", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.354", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.355", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.356", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.357", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.358", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.359", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.360", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.361", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.362", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x66a8 Click-To-Run General Telemetry auqvk Medium MonitoredScope::ExecuteUnderStopWatch {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "Watcher::Watch - Watching ServiceWatcher.Approximate duration : 0 milliseconds."} 05/06/2025 09:56:59.288 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.363", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.289 OFFICEC2 (0x6510) 0x66a8 Click-To-Run azfea Medium ::wWinMain {"MachineId": "435cb5b8f4b5774ab4471f4eb42494e4", "SessionID": "a189c478-02ee-4532-a57a-5e333960915b", "GeoID": 191, "Ver": "16.0.18623.20208", "C2RClientVer": "16.0.18623.20208", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"} 05/06/2025 09:56:59.289 OFFICEC2 (0x6510) 0x66a8 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "wfd+keEiP0aSxWDWz/Nomg.141", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.365", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.366", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.367", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.368", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.369", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.370", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.371", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.372", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.373", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.374", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.375", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.376", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.377", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.378", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.379", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.380", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.381", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.382", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.383", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.384", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.385", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.386", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.387", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.388", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.389", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.390", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.391", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.392", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.393", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.394", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.395", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.396", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.397", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.398", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.399", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.400", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.401", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.402", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.403", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.404", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.405", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.406", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.407", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.408", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.409", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.410", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.411", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.412", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.413", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.414", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.415", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.416", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.417", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.418", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.419", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.420", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.290 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.421", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.422", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.423", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.424", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.425", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.426", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.427", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.428", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.429", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.430", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.431", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.432", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.433", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.434", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.435", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.436", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.437", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.438", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.439", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.440", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.441", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.442", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.443", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.444", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.445", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.446", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.447", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.448", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.449", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.450", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.451", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.452", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.453", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.454", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.455", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.456", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.457", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.458", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.459", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.460", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.461", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.462", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.463", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.464", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.465", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.466", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.467", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.468", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.469", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.470", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.471", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.472", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.473", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.474", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.475", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.476", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.477", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.478", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.479", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.480", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.481", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.482", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.483", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.484", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.291 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.485", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.486", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.487", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.488", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.489", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.490", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.491", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.492", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.493", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.494", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.495", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.496", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.497", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.498", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.499", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.500", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.501", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.502", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.503", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.504", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.505", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.506", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.507", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.508", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.509", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.510", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.511", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.512", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.513", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.514", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.515", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.516", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.517", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.518", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.519", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.520", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.521", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.522", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.523", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.524", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.525", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.526", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.527", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.528", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.529", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.530", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.531", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.532", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.533", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.534", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.535", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.536", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.537", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.538", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.539", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.540", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.292 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.541", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.542", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.543", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.544", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.545", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.546", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.547", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.548", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.549", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.550", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.551", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.552", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.553", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.554", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.555", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.556", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.557", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.558", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.559", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.560", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.561", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.562", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.563", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.564", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.565", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.566", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.567", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.568", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.569", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.570", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.571", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.572", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.573", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.574", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.575", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.576", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.577", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.578", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.579", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.580", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.581", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.582", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.583", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.584", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.585", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.586", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.587", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.588", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.589", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.590", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.591", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.592", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.593", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.293 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.594", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.595", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.596", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.597", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.598", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.599", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.600", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.601", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.602", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.603", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.604", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.605", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.606", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.607", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.608", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.609", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.610", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.611", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.612", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.613", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.614", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV": "wfd+keEiP0aSxWDWz/Nomg.615", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 8C1F4B0B-C4EE-484E-B49E-9BF6992DE445 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x6b40 Activity bht56 Medium DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x66a8 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "wfd+keEiP0aSxWDWz/Nomg.364.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x66a8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "wfd+keEiP0aSxWDWz/Nomg.364.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.364.1", "Activity.Duration": 39, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "C872FD8C-A6C3-4174-B984-23B7284D1F02", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "WorldWide.Host", "Data.ElapsedInMs": 4} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.364", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "wfd+keEiP0aSxWDWz/Nomg.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x64bc Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.6.1", "Activity.Duration": 19890, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 05/06/2025 09:56:59.294 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 13, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.616", "Activity.Duration": 22, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5, "Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1, "Data.DetachedDuration": 9, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk", "Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"} 05/06/2025 09:56:59.295 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "wfd+keEiP0aSxWDWz/Nomg.616", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.295 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0} 05/06/2025 09:56:59.295 OFFICEC2 (0x6510) 0x64bc Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "wfd+keEiP0aSxWDWz/Nomg.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.295 OFFICEC2 (0x6510) 0x64bc Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 16, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.6", "Activity.Duration": 20889, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 05/06/2025 09:56:59.339 OFFICEC2 (0x6510) 0x66a8 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "wfd+keEiP0aSxWDWz/Nomg.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.343 OFFICEC2 (0x6510) 0x66a8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV": "wfd+keEiP0aSxWDWz/Nomg.617", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.343 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169, "InternalSequenceNumber": 17, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.617", "Activity.Duration": 3465, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT", "Data.RetryCount": 0} 05/06/2025 09:56:59.344 OFFICEC2 (0x6510) 0x66a8 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "wfd+keEiP0aSxWDWz/Nomg.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.345 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.346 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.349 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.350 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.351 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "wfd+keEiP0aSxWDWz/Nomg.618.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "wfd+keEiP0aSxWDWz/Nomg.618", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.18623.20208_X64_{917EF7C1-22E1-463F-92C5-60D6CFF3689A}"} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 18, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "wfd+keEiP0aSxWDWz/Nomg.618", "Activity.Duration": 8000, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false} 05/06/2025 09:56:59.352 OFFICEC2 (0x6510) 0x66a8 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false} 05/06/2025 09:56:59.353 OFFICEC2 (0x6510) 0x66a8 Telemetry Event deasu Medium SLGetWindowsInformationDWORD result {"IsWCOS": false} 05/06/2025 09:56:59.353 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 19, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 18, "Data.SecondPassCount": 0} 05/06/2025 09:56:59.354 OFFICEC2 (0x6510) 0x66a8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 20, "Time": "2025-05-06T07:56:59Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 77, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.UXPlatform.DesktopProcessLifecycleLibletEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteToGEAfterUnactualizedPrewarmSessionEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufWriteEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ProtobufReadEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopBondUAEWrite\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.BondReadDisabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrioritizeProtobufEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2538943Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2548955Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.BroadcastOnAdapterSelected\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.MoveBlocklistingRegistryCodeOutOfAirSpace\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2619016Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2629026Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2629026Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.UseGetBestAdapter\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2629026Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2629026Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2659058Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2659058Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2679075Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2679075Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2739121Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2749136Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2749136Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2749136Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2759138Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.XOrgExp\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2759138Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.EnsureIdentityManagerInited2\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2759138Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2759138Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"33\", \"Q\" : 1000.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2769151Z\", \"C\" : \"\", \"Q\" : 17.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.useNoopHandlerGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2779165Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2779165Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2779165Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2819205Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2819205Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUninit\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2899296Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2909303Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2949331Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.2959332Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3407360Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_compact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3407360Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3437390Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" : 300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3437390Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3437390Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3437390Z\", \"C\" : \"\", \"Q\" : 36.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3527466Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-05-06T07:56:59.3527466Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" } ]"}