Timestamp Process TID Area Category EventID Level Message

Correlation
01/06/2025 15:55:45.638 OFFICEC2 (0x4874) 0xc1c OfficeTelemetry_PerfMetrics
axbjw Medium RuleFieldNamesImpact {"ETW_EventId": 196, "ETW_Keywords":
128, "cbMemory": 2878, "count": 95}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run General
Telemetry aqkhc Medium InitLogging {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18227.20162",
"ContextData": "{\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft
Shared\\\\ClickToRun\\\\
OfficeC2RClient.exe\",\"IntegrityLevel\":\"0x4000\",\"ExeVer\":\"16.0.18227.20162\"
,\"CommandLine\":\"/frequentupdate SCHEDULEDTASK
displaylevel=False\",\"Bitness\":\"64\",\"SecuritySessionId\":\"0\",\"ProcessType\"
:\"OfficeC2RClient\",\"OSVersion\":\"10.0\",\"ProductType\":\"1\",\"ProcessorArch\"
:\"9\",\"Locale\":\"3082\",\"AppVVersion\":\"16.0.18227.20162\"}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Activity bjtct Medium
ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV":
"ZASgNSlonEGeOvMqbaYPIA.11", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run 8f5y1
Medium WaitForFlightInfo {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18227.20162",
"ContextData": "{\"Wait
complete\":\"message\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18227.20162",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideVal
ue':'','flightData':'','returnValue':'unknown'}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "0.0.0.0", "C2RClientVer": "16.0.18227.20162",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideVal
ue':'','flightData':'','returnValue':'unknown'}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.12", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.13", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run cfbm2
Medium DoFrequentUpdates {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "16.0.18227.20162", "C2RClientVer":
"16.0.18227.20162", "ContextData": "{\"Running frequent
updates\":\"message\",\"hours\":\"24\"}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.14", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.15", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.16", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.17", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.18", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.19", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.20", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.21", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.22", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.23", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.24", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.25", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.26", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.27", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.28", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.29", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.30", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.31", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run b5k1x
Medium DoFrequentUpdates {"MachineId":
"4359b56a7476564cbb98c4e9e986243c", "SessionID": "c722433b-0bba-422e-8cb8-
0f7bda8f4b9e", "GeoID": 217, "Ver": "16.0.18227.20162", "C2RClientVer":
"16.0.18227.20162", "ContextData": "{\"Less than a day since last update run, just
trying to apply!\":\"message\",\"time\":\"16156607\"}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.32", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.33", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.34", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.35", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.36", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.37", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.38", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.39", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.40", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.41", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.42", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.43", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.44", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.45", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.46", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.47", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.48", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.49", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.50", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.51", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.52", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.53", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Click-To-Run azfea
Medium ::wWinMain {"MachineId": "4359b56a7476564cbb98c4e9e986243c",
"SessionID": "c722433b-0bba-422e-8cb8-0f7bda8f4b9e", "GeoID": 217, "Ver":
"16.0.18227.20162", "C2RClientVer": "16.0.18227.20162", "ContextData": "ClientExe
complete. {'Action':'19','Result':'0'}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.54", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x769c Activity bjtcw Medium
ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV":
"ZASgNSlonEGeOvMqbaYPIA.11", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.55", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.56", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.57", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.58", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.59", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.60", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.61", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.62", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.63", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.64", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.65", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.66", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.67", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.68", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.69", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.70", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.71", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.72", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.73", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.74", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.75", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.76", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.77", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.78", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.79", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.80", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.81", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.82", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.83", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.84", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.85", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.86", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.87", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.88", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.89", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.90", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.91", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.92", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.93", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.95", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.96", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.97", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.98", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.99", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.100", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.101", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.102", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.103", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.104", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.105", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.106", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.107", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.108", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.109", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.110", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.111", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.112", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.113", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.114", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.115", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.116", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.117", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.118", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.119", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.120", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.121", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.122", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.123", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.124", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.125", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.126", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.127", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.128", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.129", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.130", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.131", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.132", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.133", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.134", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.135", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.136", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.137", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.138", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.139", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.140", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.141", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.142", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.143", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.144", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.145", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.146", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.147", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.148", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.149", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.150", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.151", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.152", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.153", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.154", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.155", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.156", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.157", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.158", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.159", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.160", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.161", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.162", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.163", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.164", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.165", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.166", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.658 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.167", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.168", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.169", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.170", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.171", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.172", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.173", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.174", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.175", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.176", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.177", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.178", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.179", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.180", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.181", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.182", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.183", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.184", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.185", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.186", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.187", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.188", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.189", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.190", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.191", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.192", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.193", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.194", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.195", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.196", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.197", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.198", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.199", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.200", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.201", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.202", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.203", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.204", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.205", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.206", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.207", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.208", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.209", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.210", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.211", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.212", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.213", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.214", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.215", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.216", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.217", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.218", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.219", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.220", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.221", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.222", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.223", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.224", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.225", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.226", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.227", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.228", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.229", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.230", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.231", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.232", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.233", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.234", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.235", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.236", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.237", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.238", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.239", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.240", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.241", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.242", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.243", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.244", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.245", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.246", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.247", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.248", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.249", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.250", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.251", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.252", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.253", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.254", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.255", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.256", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.257", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.258", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.259", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.260", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.261", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.262", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.263", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.264", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.265", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.266", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.267", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.268", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.269", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.270", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.271", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.272", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.273", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.274", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.275", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.276", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.277", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.278", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.279", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.280", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.281", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.282", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.283", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.284", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.285", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.286", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.287", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.288", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.289", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.290", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.291", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.292", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.293", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.294", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.295", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.296", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.297", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.298", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.299", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.300", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.301", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.302", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.303", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.304", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.305", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.306", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.307", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.308", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.309", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.310", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.311", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.312", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.313", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.314", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.315", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.316", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.317", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.318", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.319", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.320", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.321", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.322", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.323", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.324", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.325", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.326", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.327", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.328", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.329", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.330", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.331", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.332", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.333", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.334", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.335", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.336", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.337", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.338", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.339", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.340", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.341", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.342", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.343", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.344", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.345", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.346", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.347", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.348", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.349", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.350", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.351", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.352", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.353", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.354", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.355", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.356", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.357", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.358", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.359", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.360", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.361", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.362", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.363", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.364", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.365", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.366", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.367", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.368", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.369", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.370", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.371", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.372", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.373", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.374", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.375", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.376", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.377", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.378", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.379", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.380", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.381", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.382", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.383", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.384", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.385", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.386", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.387", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.388", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.389", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.390", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.391", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.392", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.393", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.394", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.395", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.396", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.397", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.398", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.399", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.400", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.401", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.402", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.403", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.404", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.405", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.406", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.407", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.408", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.409", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.410", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.411", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.412", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.413", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.414", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.415", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.416", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.417", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.418", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.419", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.420", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.421", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.422", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.423", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.424", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.425", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.426", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.427", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.428", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.429", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.430", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.431", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.432", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.433", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.434", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.435", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.436", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.437", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.438", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.439", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.440", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.441", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.442", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.443", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.444", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.445", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.446", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.447", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.448", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.449", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.450", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.451", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.452", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.453", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.454", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.455", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.456", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.457", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.458", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.459", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.460", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.461", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.462", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.463", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.464", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.465", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.466", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.467", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.468", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.469", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.470", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.471", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.472", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.473", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.474", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.475", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.476", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.477", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.478", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.479", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.480", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.481", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.482", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.483", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.484", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.485", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.486", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.487", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.488", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.489", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.490", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.491", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.492", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.493", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.494", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.495", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.496", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.497", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.498", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.499", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.500", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.501", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.502", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.503", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.504", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.505", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.506", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.507", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.508", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.509", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.510", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.511", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.512", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.513", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.514", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.515", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.516", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.517", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.518", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.519", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.520", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.521", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.522", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.523", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.524", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.525", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.526", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.527", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.528", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.529", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.530", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.531", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.532", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.533", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.534", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.535", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.536", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.537", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.538", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.539", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.540", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.541", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.542", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.543", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.544", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.545", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.546", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.547", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.548", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.549", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.550", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.551", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.552", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.553", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.554", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.555", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.556", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.557", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.558", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.559", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.560", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.561", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.562", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.563", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.564", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.565", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.566", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
 DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.567", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.568", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.569", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.570", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.571", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.572", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.573", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.574", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.575", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.576", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.577", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.578", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.579", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.580", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.581", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.582", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.583", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.584", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.585", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.586", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.587", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.588", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.589", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.590", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
 EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.591", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.592", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.593", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.594", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.595", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.596", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.597", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.667 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.598", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.599", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.600", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.601", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.602", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.603", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.604", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.605", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.606", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.607", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.608", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.609", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.610", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.611", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ServiceRequest", "CV":
"ZASgNSlonEGeOvMqbaYPIA.612", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
EE74BCA5-8077-40DA-8D9F-2573EC33E4ED
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x6d58 Activity bht56 Medium
DetachedActivity_Leaked {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Activity bjtct Medium
ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV":
"ZASgNSlonEGeOvMqbaYPIA.94.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Activity bjtcw Medium
ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV":
"ZASgNSlonEGeOvMqbaYPIA.94.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.2", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.3", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.4", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment",
"Flags": 30962256044949761, "InternalSequenceNumber": 10, "Time": "2025-01-
06T20:55:45Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-
4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV":
"ZASgNSlonEGeOvMqbaYPIA.94.1", "Activity.Duration": 39, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true, "Data.FederationTenantId":
"00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-
0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1,
"Data.TelemetryRegionCode": 1, "Data.CachedFileName": "371378B1-F9F7-4359-BF89-
2760E1955F83", "Data.CachedFileBaseHost": "Worldwide.Host",
"Data.CachedFileTelemetryUrl": "Default.Host"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.94", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1.6", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags":
30962256044949761, "InternalSequenceNumber": 11, "Time": "2025-01-06T20:55:45Z",
"AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-
5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV":
"ZASgNSlonEGeOvMqbaYPIA.613", "Activity.Duration": 35, "Activity.Count": 1,
"Activity.AggMode": 2, "Activity.Success": false, "Activity.Result.Code": 5,
"Activity.Result.Type": "4w4hf", "Activity.AggInterval": 1,
"Data.DetachedDuration": 20, "Data.Api": 5, "Data.Tag": "4w4hf",
"Data.ChainedTags": "4oadk", "Data.ConfigURLOrToken": 514, "Data.IsConfigUrl":
true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4oadk",
"Data.ElapsedInMs": 0, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags":
0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1,
"Data.FederationProviderCode": 1, "Data.FederationTenantId": "00000000-0000-0000-
0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-
000000000000", "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-
0000-0000-000000000000", "Data.ServiceStatusFlags": 1,
"Data.ServiceStatusFlagsTag": "00000"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV":
"ZASgNSlonEGeOvMqbaYPIA.613", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Telemetry Event biyhq Medium
SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags":
33777014401990913, "InternalSequenceNumber": 12, "Time": "2025-01-06T20:55:45Z",
"AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-
6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"ZASgNSlonEGeOvMqbaYPIA.7.1", "Activity.Duration": 44140, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0,
"Activity.Result.Type": "HRESULT"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.RoutingTelemetry",
"Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2025-01-
06T20:55:45Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Data.TelemetryRegion": "",
"Data.HrdTelemetryRegion": "", "Data.ConfigProviderName": "",
"Data.IdentityEndpoint": "", "Data.IsSignedUser": false, "Data.ShutDownSignal": 0}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV":
"ZASgNSlonEGeOvMqbaYPIA.7", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.677 OFFICEC2 (0x4874) 0xc1c Telemetry Event biyhq Medium
SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags":
33777014401990913, "InternalSequenceNumber": 15, "Time": "2025-01-06T20:55:45Z",
"AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-
6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"ZASgNSlonEGeOvMqbaYPIA.7", "Activity.Duration": 46454, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true}
01/06/2025 15:55:45.727 OFFICEC2 (0x4874) 0x769c Activity bjtct Medium
ActivityStarted {"Name":
"Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV":
"ZASgNSlonEGeOvMqbaYPIA.614", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtct Medium
ActivityStarted {"Name":
"Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "CV":
"ZASgNSlonEGeOvMqbaYPIA.614.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtcw Medium
ActivityEnded {"Name":
"Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "CV":
"ZASgNSlonEGeOvMqbaYPIA.614.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Telemetry.AriaEventSink.HandleMsaDeviceTokenResponse", "Flags":
33777014401991169, "InternalSequenceNumber": 16, "Time": "2025-01-06T20:55:45Z",
"AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-
6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"ZASgNSlonEGeOvMqbaYPIA.614.1", "Activity.Duration": 311, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0,
"Activity.Result.Type": "HRESULT", "Data.RetryCount": 0}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtcw Medium
ActivityEnded {"Name":
"Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "CV":
"ZASgNSlonEGeOvMqbaYPIA.614", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Telemetry.AriaEventSink.RequestMsaDeviceToken", "Flags": 33777014401991169,
"InternalSequenceNumber": 17, "Time": "2025-01-06T20:55:45Z", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.System.Activity", "Activity.CV": "ZASgNSlonEGeOvMqbaYPIA.614",
"Activity.Duration": 8618, "Activity.Count": 1, "Activity.AggMode": 0,
"Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type":
"HRESULT", "Data.RetryCount": 0}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtct Medium
ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.2", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.3", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.4", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.6", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.737 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.7", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.8", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.11", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.12", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.13", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.14", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.15", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.16", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.17", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.18", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.19", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.20", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.21", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.22", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.23", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.24", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.25", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.26", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.27", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.28", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.29", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.30", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.31", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
 DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.32", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615.33", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"ZASgNSlonEGeOvMqbaYPIA.615", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.18227.20162_X64_{35A00464-6829-419C-9E3A-F32A6DA60F20}"}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913,
"InternalSequenceNumber": 18, "Time": "2025-01-06T20:55:45Z", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.System.Activity", "Activity.CV": "ZASgNSlonEGeOvMqbaYPIA.615",
"Activity.Duration": 11024, "Activity.Count": 1, "Activity.AggMode": 0,
"Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount":
33, "Data.RejectedConfigCount": 0}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event deasu
Medium SLGetWindowsInformationDWORD result {"IsWCOS": false}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer",
"Flags": 33777014401991169, "InternalSequenceNumber": 19, "Time": "2025-01-
06T20:55:45Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 18, "Data.SecondPassCount": 0}
01/06/2025 15:55:45.747 OFFICEC2 (0x4874) 0x769c Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321,
"InternalSequenceNumber": 20, "Time": "2025-01-06T20:55:45Z", "AriaTenantToken":
"e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873",
"Data.Sequence": 0, "Data.Count": 77, "Data.Features": "[ { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\" : \"33\", \"Q\" :
0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" :
1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\" : \"33\", \"Q\" :
0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\
", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\" : \"\",
\"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump
\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CG.DeferD2DInit\", \"V\" : true, \"S\" : 1,
\"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \
"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.5980359Z\", \"C\"
: \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.MoveEventFactoryToAirSpace\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.5980359Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CG.BroadcastOnAdapterSelected\",
\"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\"
: \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CG.ExtricateResolveAdapterPolicy\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" :
5, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\"
: \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" :
0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" :
0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;
0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\"
: \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" :
0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" :
0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;
0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\"
: \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" :
0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" :
0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CG.UseGetBestAdapter\", \"V\" : true, \"S\"
: 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"\", \"Q\" :
2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\" : \"\",
\"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CG.GDIPlusFactoryMultipleDeviceContexts\",
\"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6080314Z\", \"C\"
: \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6180267Z\", \"C\" : \"33\", \"Q\" :
0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\
" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6180267Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.DoPopulateOnInit\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6180267Z\", \"C\" : \"\",
\"Q\" : 9.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6180267Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Security.OVF.FG.EnableVulnerabilityFilterLiblet\", \
"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6180267Z\", \"C\"
: \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" :
30, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6280207Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" :
5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6280207Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" :
128, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6280207Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" :
86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6280207Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.StaleMetadataForceFetch\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6280207Z\", \"C\" : \"\",
\"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLoggi
ng\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6280207Z\",
\"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37,
\"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" :
200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V
\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.UseCooldownPerConfiguration\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6380151Z\", \"C\" : \"\",
\"Q\" : 4.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37,
\"N\" : \"Microsoft.Office.Identity.Config.FixIncorrectServiceName\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6380151Z\", \"C\" : \"\",
\"Q\" : 109.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6380151Z\", \"C\" : \"\", \"Q\" :
3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.SharedText.CustomCloudFonts\", \"V\" :
true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6380151Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" :
\"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6580051Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" :
\"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6580051Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.CG.SaveUrlInServiceTicketInfo\",
\"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6580051Z\", \"C\"
: \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\"
: \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" :
0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6580051Z\", \"C\" : \"\", \"Q\" :
2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Click2Run.ChangeGate.CallEnsureAriaIsInitializedOnUn
init\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6580051Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UseOfflineStoragePrefix\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6580051Z\", \"C\" : \"\",
\"Q\" : 11.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\",
\"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.CG.MoveErrorsFromSuccessServiceRequest\", \
"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.CG.MoveErrorsFromSuccessConfigService\", \"
V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" :
\"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" :
\"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" :
0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\", \"Q\" :
0.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaOfflineStorageSizeInBytes\", \"V\" :
10485760, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaInMemoryQueueSizeInBytes\",
\"V\" : 2097152, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxHttpBlobSizeInBytes\", \"V\" :
262144, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionAwareConfigUrls\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\",
\"Q\" : 5.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaEventCollectorUriNext\", \"V\" : \"\",
\"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CheckSignedInUserForEUDB\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.EudbShutdownSignal\", \"V\" : 0, \"S\" :
0, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UseRegionBasedRouting\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.6779934Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.EnableAriaSdkTraceLogging\", \"V\
" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaMaxTeardownUploadTimeInSec\", \"V\" :
2, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxPendingHTTPRequests\", \"V\"
: 4, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.MaxDBFlushQueues\", \"V\" : 10,
\"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.6779934Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthServiceUrl\", \"V\" : \"https
://events.data.microsoft.com/OneCollector/1.0/\", \"S\" : 1, \"P\" :
0, \"T\" : \"2025-01-06T20:55:45.7279687Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" :
0, \"F\" : 52 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceAuthPolicy\", \"V\" : \"NFS_1wk_c
ompact_SSL\", \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-06T20:55:45.7279687Z\", \"C\"
: \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.MsaDeviceTokenRefreshIntervalInSeconds\",
\"V\" : 432000, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7379625Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.TestGate.DisableAriaUpload\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7379625Z\", \"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaCustomTransmitProfileInSecs\", \"V\" :
300, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7379625Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7379625Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb
1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7379625Z\", \"C\" : \"\", \"Q\" : 39.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7479583Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.DontWaitForOneDsNetworkReadyOnFlush\", \"V
\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2025-01-
06T20:55:45.7479583Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" } ]"}