0% found this document useful (0 votes)
34 views8 pages

Desktop F0ecjd0 20230613 0007

The document contains log entries from an Office Click-to-Run client. It records the launching of the client process, retrieval of configuration data, and completion of scheduled tasks like frequent updates.

Uploaded by

Mican Horia
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
34 views8 pages

Desktop F0ecjd0 20230613 0007

The document contains log entries from an Office Click-to-Run client. It records the launching of the client process, retrieval of configuration data, and completion of scheduled tasks like frequent updates.

Uploaded by

Mican Horia
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 8

Timestamp Process TID Area Category EventID Level Message

Correlation
06/13/2023 00:07:55.935 OFFICEC2 (0x4530) 0x5b64 Click-To-Run General
Telemetry aqkhc Medium InitLogging {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{\"AppVVersion\":\"10.0.22000.1878\",\"Bitness\":\"64\",\"CommandLine\":\"/
frequentupdate SCHEDULEDTASK
displaylevel=False\",\"ExeVer\":\"16.0.16501.20140\",\"IntegrityLevel\":\"0x4000\",
\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\
Microsoft Shared\\\\ClickToRun\\\\
OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"
ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}
06/13/2023 00:07:55.935 OFFICEC2 (0x4530) 0x5b64 Activity bjtct Medium
ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run 8f5y1
Medium WaitForFlightInfo {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData": "{\"message\":\"Wait
complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideVal
ue':'','flightData':'','returnValue':'unknown'}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideVal
ue':'','flightData':'','returnValue':'unknown'}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer','overri
deValue':'','flightData':'','returnValue':'unknown'}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run bhltg
Medium Core::GetFlightData {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16501.20140",
"ContextData":
"{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer','overrid
eValue':'','flightData':'','returnValue':'unknown'}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run cfbm2
Medium DoFrequentUpdates {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "16.0.16501.20196", "C2RClientVer":
"16.0.16501.20140", "ContextData": "{\"message\":\"Running frequent
updates\",\"hours\":\"24\"}"}
06/13/2023 00:07:55.936 OFFICEC2 (0x4530) 0x5b64 Click-To-Run b5k1x
Medium DoFrequentUpdates {"MachineId":
"0865d1d0badccd4cba1a837ce4224791", "SessionID": "9c450e83-7493-43ae-a25a-
6acdc86405ef", "GeoID": 244, "Ver": "16.0.16501.20196", "C2RClientVer":
"16.0.16501.20140", "ContextData": "{\"message\":\"Less than a day since last
update run, just trying to apply!\",\"time\":\"30409085\"}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Click-To-Run azfea
Medium ::wWinMain {"MachineId": "0865d1d0badccd4cba1a837ce4224791",
"SessionID": "9c450e83-7493-43ae-a25a-6acdc86405ef", "GeoID": 244, "Ver":
"16.0.16501.20196", "C2RClientVer": "16.0.16501.20140", "ContextData": "ClientExe
complete. {'Action':'19','Result':'0'}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtcw Medium
ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtct Medium
ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.2", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.3", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.937 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.4", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.938 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.938 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.6", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.938 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.7", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.8", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.9", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.11", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.12", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.13", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.14", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.15", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.16", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.940 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.17", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.18", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.19", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.20", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.21", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.22", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.23", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.24", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.25", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.26", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.27", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.941 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.28", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.29", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.30", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.31", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x2354 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.5.1", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.32", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.33", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x2354 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags":
33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-06-12T21:07:55Z",
"AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-
6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"BXEv6GLWfUaz+FfthZSO2Q.5.1", "Activity.Duration": 16865, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0,
"Activity.Result.Type": "HRESULT"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtco Medium
DroppedAggregatedActivity {"Name":
"Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10.34", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.10", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913,
"InternalSequenceNumber": 11, "Time": "2023-06-12T21:07:55Z", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.System.Activity", "Activity.CV": "BXEv6GLWfUaz+FfthZSO2Q.10",
"Activity.Duration": 4889, "Activity.Count": 1, "Activity.AggMode": 0,
"Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount":
34, "Data.RejectedConfigCount": 0}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Telemetry Event bsq69
Monitorable Deactivated event detected. {"EventName":
"Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer",
"Flags": 33777014401991169, "InternalSequenceNumber": 12, "Time": "2023-06-
12T21:07:55Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 11, "Data.SecondPassCount": 0}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x2354 Activity bjtcw Medium
ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV":
"BXEv6GLWfUaz+FfthZSO2Q.5", "ProcessIdentifier":
"OfficeC2RClient.exe_16.0.16501.20140_X86_{E82F7105-D662-467D-B3F8-57ED85948ED9}"}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x2354 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob",
"Flags": 33777014401991169, "InternalSequenceNumber": 13, "Time": "2023-06-
12T21:07:55Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-
4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV":
"BXEv6GLWfUaz+FfthZSO2Q.5", "Activity.Duration": 17904, "Activity.Count": 1,
"Activity.AggMode": 0, "Activity.Success": true}
06/13/2023 00:07:55.942 OFFICEC2 (0x4530) 0x5b64 Telemetry Event biyhq
Medium SendEvent {"EventName":
"Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321,
"InternalSequenceNumber": 14, "Time": "2023-06-12T21:07:55Z", "AriaTenantToken":
"e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873",
"Data.Sequence": 0, "Data.Count": 42, "Data.Features": "[ { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" :
5.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" :
6.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\
", \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"\",
\"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UAE.ProcessCrashSecurelyChangeGate\", \"V\
" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8895067Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump
\", \"V\" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\",
\"C\" : \"\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8895067Z\", \"C\" : \"\", \"Q\" : 0.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACUsers\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.UseWincompInWin32\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Licensing.UseCanRunFeatureCacheUpdate\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8895067Z\", \"C\" : \"\",
\"Q\" : 0.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8895067Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \
"V\" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8905041Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.EnableWin32HardwareAcceleration\", \"V\" :
true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8905041Z\", \"C\" : \"39\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8905041Z\", \"C\" : \"1\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Graphics.CompositionOnlyAdapterSupportEnabled\", \"V
\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8915014Z\", \"C\" :
\"1\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" :
0, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8934978Z\", \"C\" : \"33\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8934978Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" :
1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.8954916Z\", \"C\" : \"33\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\
" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.8954916Z\", \"C\" : \"33\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" :
5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9247329Z\", \"C\" : \"33\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLoggi
ng\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9257303Z\",
\"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37,
\"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" :
200, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"33\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V
\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"33\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"1\", \"Q\" : 10.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 11,
\"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9257303Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\"
: true, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"39\", \"Q\" : 2.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" : 37, \"N\" : \"Microsoft.Office.SharedText.CustomCloudFonts\", \"V\" :
false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9257303Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.TelemetryRegionEnabled\", \"V\" :
true, \"S\" : 0, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9327109Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.CG.IgnoreINTInConfigService\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9366995Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Security.CG.AppGuard.ServiceMapFromCache\", \"V\" :
true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9366995Z\", \"C\" : \"\",
\"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.OWSA.UseDeferredCacheUpdateStrategy\", \"V\
" : false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9366995Z\", \"C\" :
\"\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" :
\"Microsoft.Office.Click2Run.UseOfficeHelperAddon\", \"V\" : \"\", \"S\" : 1, \"P\"
: 0, \"T\" : \"2023-06-12T21:07:55.9366995Z\", \"C\" : \"33\", \"Q\" : 3.0, \"M\" :
0, \"F\" : 52 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Click2Run.UseOutlookShareAddon\", \"V\" : \"\", \"S\
" : 1, \"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9366995Z\", \"C\" : \"33\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52 }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer\", \"V\" : \"\",
\"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9366995Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer\", \"V\" : \"\",
\"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9366995Z\", \"C\" : \"33\", \"Q\" : 1.0, \"M\" : 0, \"F\" : 52 },
{ \"ID\" :
37, \"N\" : \"Microsoft.Office.Click2Run.FrequentUpdateTimeBufferInHours\", \"V\" :
24, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9366995Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.EnableDirectCallsForConsentMetadata\", \"V
\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9376976Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9416874Z\", \"C\" : \"\", \"Q\" : 1.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.CCCOChangeGate\", \"V\" : true, \"S\" : 1,
\"P\" : 0, \"T\" : \"2023-06-12T21:07:55.9426846Z\", \"C\" : \"\", \"Q\" :
1.0, \"M\" : 0, \"F\" : 52, \"G\" : \"Opt\" }, { \"ID\" :
37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" :
false, \"S\" : 11, \"P\" : 0, \"T\" : \"2023-06-
12T21:07:55.9426846Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" :
52, \"G\" : \"Opt\" } ]"}
06/13/2023 00:07:55.943 OFFICEC2 (0x4530) 0x5b64 Telemetry Event biyhq
Medium SendEvent {"EventName": "Office.Telemetry.SamplingPolicy",
"Flags": 33777022991925505, "InternalSequenceNumber": 15, "Time": "2023-06-
12T21:07:55Z", "Rule": "90401.3", "AriaTenantToken":
"f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405",
"Contract": "Office.Legacy.Metadata", "Data.SamplingMethod": "Unknown",
"Data.SamplingKey": "Unknown", "Data.MeasuresEnabled": true}

You might also like