Timestamp Process TID Area Category EventID Level Message

Correlation
06/13/2023 05:22:36.543 OFFICEC2 (0x1e34) 0x7a84
OfficeTelemetry_PerfMetrics axbjw Medium RuleFieldNamesImpact
{"ETW_EventId": 196, "ETW_Keywords": 128, "cbMemory": 3630, "count": 118}
06/13/2023 05:22:36.548 OFFICEC2 (0x1e34) 0x51a4 Click-To-Run General
Telemetry aqkhc Medium InitLogging {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{\"AppVVersion\":\"10.0.22000.1878\",\"Bitness\":\"64\",\"CommandLine\":\"/
WatchService\",\"ExeVer\":\"16.0.16501.20140\",\"IntegrityLevel\":\"0x4000\",\"Loca
le\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft
Shared\\\\ClickToRun\\\\
OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"
ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}
06/13/2023 05:22:36.548 OFFICEC2 (0x1e34) 0x51a4 Activity bjtct Medium
ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.548 OFFICEC2 (0x1e34) 0x51a4 Click-To-Run azfea
Medium ::wWinMain {"MachineId": "0865d1d0badccd4cba1a837ce4224791",
"SessionID": "9c450e83-7493-43ae-a25a-6acdc86405ef", "GeoID": 244, "Ver":
"16.0.16501.20196", "C2RClientVer": "16.0.16501.20140", "ContextData": "ClientExe
complete. {'Action':'11','Result':'0'}"}
06/13/2023 05:22:36.548 OFFICEC2 (0x1e34) 0x51a4 Activity bjtcw Medium
ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.548 OFFICEC2 (0x1e34) 0x51a4 Activity bjtct Medium
ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.2", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.3", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.4", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.549 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
 DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.6", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.550 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.7", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.8", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.11", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.12", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.551 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.13", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.14", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.15", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.16", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.17", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.18", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.19", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.20", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.21", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.22", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.23", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.24", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.25", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.26", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.27", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.28", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.552 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.29", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.30", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.31", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x7a84 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.5.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x7a84 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags":
33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-06-13T02:22:36Z",
"AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-
6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.5.1", "Activity.Duration": 13829, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0,
"Activity.Result.Type": "HRESULT"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.32", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.33", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10.34", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913,
"InternalSequenceNumber": 11, "Time": "2023-06-13T02:22:36Z", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.System.Activity", "Activity.CV": "ZRa4Mxq/tEmcdH3Q1H3m+g.10",
"Activity.Duration": 5049, "Activity.Count": 1, "Activity.AggMode": 0,
"Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount":
34, "Data.RejectedConfigCount": 0}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer",
"Flags": 33777014401991169, "InternalSequenceNumber": 12, "Time": "2023-06-
13T02:22:36Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 11, "Data.SecondPassCount": 0}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x7a84 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{33B81665-BF1A-49B4-9C74-7DD0D47DE6FA}"}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x7a84 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob",
"Flags": 33777014401991169, "InternalSequenceNumber": 13, "Time": "2023-06-
13T02:22:36Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"ZRa4Mxq/tEmcdH3Q1H3m+g.5", "Activity.Duration": 14647, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true}
06/13/2023 05:22:36.553 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321,
"InternalSequenceNumber": 14, "Time": "2023-06-13T02:22:36Z", "AriaTenantToken":
"e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873",
"Data.Sequence": 0, "Data.Count": 37, "Data.Features": "[ { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5294046Z\", \"C\" : \"33\", \"Q\" :
3.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5294046Z\", \"C\" : \"33\", \"Q\" :
5.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\
", \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5294046Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5294046Z\", \"C\" : \"\",
\"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UAE.ProcessCrashSecurelyChangeGate\", \"V\
" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5294046Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump
\", \"V\" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5294046Z\",
\"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5294046Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5294046Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACUsers\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5303718Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.UseWincompInWin32\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5303718Z\", \"C\" : \"33\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Licensing.UseCanRunFeatureCacheUpdate\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5303718Z\", \"C\" : \"\",
\"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5303718Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \
"V\" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5303718Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.EnableWin32HardwareAcceleration\", \"V\" :
true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5303718Z\", \"C\" : \"39\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5303718Z\", \"C\" : \"1\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CompositionOnlyAdapterSupportEnabled\", \"V
\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5314016Z\", \"C\" :
\"1\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" :
0, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5338744Z\", \"C\" : \"33\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5348987Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5358966Z\", \"C\" : \"33\", \"Q\" :
0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\
" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5358966Z\", \"C\" : \"33\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" :
5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"33\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLoggi
ng\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5398889Z\",
\"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37,
\"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" :
200, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"33\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V
\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"1\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 11,
\"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5398889Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5398889Z\", \"C\" : \"39\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.SharedText.CustomCloudFonts\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5408944Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.TelemetryRegionEnabled\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5444104Z\", \"C\" : \"\",
\"Q\" : 0.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.CG.IgnoreINTInConfigService\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5484269Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Security.CG.AppGuard.ServiceMapFromCache\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5484269Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.OWSA.UseDeferredCacheUpdateStrategy\", \"V\
" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5484269Z\", \"C\" :
\"\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" :
\"Microsoft.Office.Telemetry.EnableDirectCallsForConsentMetadata\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5484269Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5524142Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CCCOChangeGate\", \"V\" : true, \"S\" : 1,
\"P\" : 0, \"T\" : \"2023-06-13T02:22:36.5539775Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
13T02:22:36.5539775Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" } ]"}
06/13/2023 05:22:36.554 OFFICEC2 (0x1e34) 0x51a4 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.SamplingPolicy",
"Flags": 33777022991925505, "InternalSequenceNumber": 15, "Time": "2023-06-
13T02:22:36Z", "Rule": "90401.3", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.Legacy.Metadata", "Data.SamplingMethod": "Unknown",
"Data.SamplingKey": "Unknown", "Data.MeasuresEnabled": true}