-
Notifications
You must be signed in to change notification settings - Fork 0
/
CIJAZMYNEJMARRU-20240404-0910.log
80 lines (80 loc) · 83.7 KB
/
CIJAZMYNEJMARRU-20240404-0910.log
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
Timestamp Process TID Area Category EventID Level Message Correlation
04/04/2024 09:10:15.777 OFFICEC2 (0x191c) 0x804 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"ExeVer\":\"16.0.17328.20184\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}
04/04/2024 09:10:16.100 OFFICEC2 (0x191c) 0x804 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "+/nrhRIBTUOcgq9rHV5I6g.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:15.974 OFFICEC2 (0x191c) 0x2f88 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "+/nrhRIBTUOcgq9rHV5I6g.9.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.106 OFFICEC2 (0x191c) 0x2f88 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "+/nrhRIBTUOcgq9rHV5I6g.9.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:15.979 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.106 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.106 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.106 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.147 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.EndPoint", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.190 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.191 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.191 OFFICEC2 (0x191c) 0x3bac Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.583 OFFICEC2 (0x191c) 0x2f88 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 8, "Time": "2024-04-04T16:10:16Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "+/nrhRIBTUOcgq9rHV5I6g.9.1", "Activity.Duration": 411263, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "F103759B-E99A-4E8D-9610-F3200BC8EDEF", "Data.CachedFileBaseHost": "Worldwide.Host", "Data.CachedFileTelemetryUrl": "Default.Host"}
04/04/2024 09:10:16.599 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:16.599 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.098 OFFICEC2 (0x191c) 0x2f88 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.144 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.160 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.165 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.178 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.179 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.180 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.180 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.180 OFFICEC2 (0x191c) 0x2f88 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "+/nrhRIBTUOcgq9rHV5I6g.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.181 OFFICEC2 (0x191c) 0x2f88 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2024-04-04T16:10:17Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "+/nrhRIBTUOcgq9rHV5I6g.12", "Activity.Duration": 189762, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 32, "Data.RejectedConfigCount": 0}
04/04/2024 09:10:17.422 OFFICEC2 (0x191c) 0x3bac Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:17.422 OFFICEC2 (0x191c) 0x3bac Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401991169, "InternalSequenceNumber": 10, "Time": "2024-04-04T16:10:17Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "+/nrhRIBTUOcgq9rHV5I6g.5.1", "Activity.Duration": 31331487, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}
04/04/2024 09:10:17.182 OFFICEC2 (0x191c) 0x2f88 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}
04/04/2024 09:10:17.453 OFFICEC2 (0x191c) 0x2f88 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}
04/04/2024 09:10:17.650 OFFICEC2 (0x191c) 0x2f88 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 12, "Time": "2024-04-04T16:10:17Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 9, "Data.SecondPassCount": 2}
04/04/2024 09:10:18.016 OFFICEC2 (0x191c) 0x3bac Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "+/nrhRIBTUOcgq9rHV5I6g.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:18.016 OFFICEC2 (0x191c) 0x3bac Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401991169, "InternalSequenceNumber": 13, "Time": "2024-04-04T16:10:18Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "+/nrhRIBTUOcgq9rHV5I6g.5", "Activity.Duration": 32261837, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true}
04/04/2024 09:10:23.234 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:23.884 OFFICEC2 (0x191c) 0x2f88 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2024-04-04T16:10:23Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "+/nrhRIBTUOcgq9rHV5I6g.14", "Activity.Duration": 444, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 5, "Data.Tag": "4w4hf", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4xe1z", "Data.ElapsedInMs": 10, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
04/04/2024 09:10:23.884 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:23.947 OFFICEC2 (0x191c) 0x2f88 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry", "Flags": 33777014401990913, "InternalSequenceNumber": 15, "Time": "2024-04-04T16:10:23Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "", "Data.ConfigProviderName": "", "Data.IdentityEndpoint": ""}
04/04/2024 09:10:25.994 OFFICEC2 (0x191c) 0x4250 Activity bjtcw Medium ActivityEnded {"Name": "Office.Experimentation.EcsFetch", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:26.137 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.ParseEcsConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:26.561 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.UpdateConfigCache", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:27.626 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.WriteEcsConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:28.032 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.ConfigLoadComplete", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:28.032 OFFICEC2 (0x191c) 0x4250 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.LoadEcsConfig", "CV": "+/nrhRIBTUOcgq9rHV5I6g.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:10:27.996 OFFICEC2 (0x191c) 0x804 Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"9200\",\"gotFlights\":\"True\"}"}
04/04/2024 09:10:30.149 OFFICEC2 (0x191c) 0x804 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}
04/04/2024 09:10:30.149 OFFICEC2 (0x191c) 0x804 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}
04/04/2024 09:10:30.152 OFFICEC2 (0x191c) 0x804 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}
04/04/2024 09:10:30.156 OFFICEC2 (0x191c) 0x804 Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}
04/04/2024 09:10:30.465 OFFICEC2 (0x191c) 0x804 Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"}
04/04/2024 09:10:30.474 OFFICEC2 (0x191c) 0x804 Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"56987021\"}"}
04/04/2024 09:10:30.687 OFFICEC2 (0x191c) 0x804 Click-To-Run azfea Medium ::wWinMain {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"}
04/04/2024 09:10:30.687 OFFICEC2 (0x191c) 0x804 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "+/nrhRIBTUOcgq9rHV5I6g.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:11:54.553 OFFICEC2 (0x191c) 0x804 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 18, "Time": "2024-04-04T16:11:45Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 71, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:05:15.4761967Z\", \"C\" : \"\", \"Q\" : 295234.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:05:15.5169470Z\", \"C\" : \"\", \"Q\" : 122.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:05:16.3609707Z\", \"C\" : \"\", \"Q\" : 490.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:05:16.3609707Z\", \"C\" : \"\", \"Q\" : 17.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:05:32.1387375Z\", \"C\" : \"33\", \"Q\" : 3.086333E6, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:24.6126308Z\", \"C\" : \"33\", \"Q\" : 1.0977829E7, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:28.1351417Z\", \"C\" : \"33\", \"Q\" : 189366.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:30.8048671Z\", \"C\" : \"33\", \"Q\" : 532206.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACUsers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:45.1142375Z\", \"C\" : \"\", \"Q\" : 501023.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACSecondSet\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:45.3797275Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACThirdSet\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:45.4887224Z\", \"C\" : \"\", \"Q\" : 12.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.UseWincompInWin32\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:45.9605109Z\", \"C\" : \"33\", \"Q\" : 141834.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:46.1831453Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.SendWinCompEnabledData\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:07:46.1831453Z\", \"C\" : \"\", \"Q\" : 55.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:07:46.5922973Z\", \"C\" : \"\", \"Q\" : 58.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.EnableWin32HardwareAcceleration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-04T16:07:46.8358433Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-04T16:07:47.9204121Z\", \"C\" : \"1\", \"Q\" : 6801.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CompositionOnlyAdapterSupportEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-04T16:07:52.1475275Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.0006681Z\", \"C\" : \"33\", \"Q\" : 476352.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.9114368Z\", \"C\" : \"33\", \"Q\" : 35399.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.9624832Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.9624832Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.9624832Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:08:04.9624832Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:08:19.1071791Z\", \"C\" : \"\", \"Q\" : 301091.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Resiliency.CrashViaSpecialUserModeAPC.CG\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:08:57.7233323Z\", \"C\" : \"\", \"Q\" : 147559.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:08:58.6727052Z\", \"C\" : \"33\", \"Q\" : 97283.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:08:59.4570839Z\", \"C\" : \"33\", \"Q\" : 600295.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:35.4071459Z\", \"C\" : \"\", \"Q\" : 469157.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:45.6336595Z\", \"C\" : \"33\", \"Q\" : 823870.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:46.1338270Z\", \"C\" : \"\", \"Q\" : 19590.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:46.1796660Z\", \"C\" : \"\", \"Q\" : 29042.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:09:50.1312225Z\", \"C\" : \"\", \"Q\" : 28630.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.OnboardAdaptiveSampling\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:50.1971643Z\", \"C\" : \"\", \"Q\" : 22.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:50.8143039Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:50.8423712Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:50.8423712Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:52.2534166Z\", \"C\" : \"1\", \"Q\" : 1.411045E6, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:52.2699175Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:52.8759851Z\", \"C\" : \"\", \"Q\" : 10.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:53.8487936Z\", \"C\" : \"\", \"Q\" : 33419.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.OWSA.UseDeferredCacheUpdateStrategy\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:53.8487936Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-04T16:09:53.9629102Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.SharedText.CustomCloudFonts\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:54.0655648Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.OVF.FG.EnableVulnerabilityFilterLiblet\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:09:54.0745828Z\", \"C\" : \"\", \"Q\" : 15.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:14.3202226Z\", \"C\" : \"\", \"Q\" : 185385.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:14.9550732Z\", \"C\" : \"\", \"Q\" : 62.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:15.3360141Z\", \"C\" : \"\", \"Q\" : 97.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:15.3360141Z\", \"C\" : \"\", \"Q\" : 9.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:15.6990374Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:16.9595285Z\", \"C\" : \"\", \"Q\" : 658.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.IsSamplingLogicV2EnabledChangeGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:17.6069246Z\", \"C\" : \"\", \"Q\" : 20.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:17.6503967Z\", \"C\" : \"\", \"Q\" : 33331.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.NetworkResponseTimeout\", \"V\" : 5000, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:20.4913982Z\", \"C\" : \"\", \"Q\" : 84804.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.2333491Z\", \"C\" : \"\", \"Q\" : 26.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" : 10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.7055939Z\", \"C\" : \"33\", \"Q\" : 446200.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\", \"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.7495133Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" : 262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.8761909Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.8761909Z\", \"C\" : \"\", \"Q\" : 16.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"33\", \"Q\" : 62526.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"\", \"Q\" : 11.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 10, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" : 2, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\" : 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:23.9472431Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-04T16:10:27.8366325Z\", \"C\" : \"\", \"Q\" : 78.0, \"M\" : 10, \"F\" : 100, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:29.8607914Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 100 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:30.1490782Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 100 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:30.1490782Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 100 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-04T16:10:30.1521587Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 10, \"F\" : 100 } ]"}
04/04/2024 09:11:56.503 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}
04/04/2024 09:11:56.503 OFFICEC2 (0x191c) 0x2f88 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "+/nrhRIBTUOcgq9rHV5I6g.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{85EBF9FB-0112-434D-9C82-AF6B1D5E48EA}"}