-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCIJAZMYNEJMARRU-20240331-2230.log
96 lines (96 loc) · 44.2 KB
/
CIJAZMYNEJMARRU-20240331-2230.log
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
this.init = init;
function init() {
CreditCardData = [];
CreditCardData.push(new BrandData(CardIssuer.Visa, new BrandInfo([new Rule([13, 16, 19], ["4"])], "Visa")));
CreditCardData.push(new BrandData(CardIssuer.MasterCard, new BrandInfo([new Rule([16], ["51", "52", "53", "54", "55", "2221", "2222", "2223", "2224", "2225", "2226", "2227", "2228", "2229", "223", "224", "225", "226", "227", "228", "229", "23", "24", "25", "26", "27", "270", "271", "2720"])], "Mastercard")));
CreditCardData.push(new BrandData(CardIssuer.AmericanExpress, new BrandInfo([new Rule([15], ["34", "37"])], "American Express")));
CreditCardData.push(new BrandData(CardIssuer.Discover, new BrandInfo([new Rule([16], ["6011", "644", "645", "646", "647", "648", "649", "65"])], "Discover")));
CreditCardData.push(new BrandData(CardIssuer.DinersClub, new BrandInfo([new Rule([14, 16], ["300", "301", "302", "303", "304", "305", "3095", "36", "38"])], "Diners Club")));
CreditCardData.push(new BrandData(CardIssuer.JCB, new BrandInfo([new Rule([15, 16], ["3528", "3529", "353", "354", "355", "356", "357", "358"]), new Rule([15], ["1800", "2131"]), new Rule([19], ["1800", "357266"])], "JCB")));
CreditCardData.push(new BrandData(CardIssuer.Laser, new BrandInfo([new Rule([16, 17, 18, 19], ["6304"])], "Laser")));
CreditCardData.push(new BrandData(CardIssuer.Switch, new BrandInfo([new Rule([16, 18, 19], ["633110", "633312", "633304", "633303", "633301", "633300"])], "Switch")));
CreditCardData.push(new BrandData(CardIssuer.Maestro, new BrandInfo([new Rule([12, 13, 14, 15, 16, 17, 18, 19], ["5018", "5020", "5038", "5612", "5893", "6304", "6759", "6761", "6762", "6763"])], "Maestro")));
CreditCardData.push(new BrandData(CardIssuer.ChinaUnionPay,new BrandInfo([new Rule([16, 17, 18, 19],
["6*2"])],"China UnionPay")));
CreditCardData.push(new BrandData(CardIssuer.Dankort,new BrandInfo([new Rule([16],["5019"])],"Dankort")));
CreditCardData.push(new BrandData(CardIssuer.RuPay,new BrandInfo([new Rule([16],["6061", "6062", "6063" , "6064", "6065", "6066", "6067", "6068", "6069", "607", "608"])],"RuPay")));
CreditCardData.push(new BrandData(CardIssuer.Hipercard,new BrandInfo([new Rule([19],["384"])],"Hipercard")));
CreditCardData.push(new BrandData(CardIssuer.Unknown,new BrandInfo([new Rule([15],["7", "80", "90"])],"Unknown")));
}
Timestamp Process TID Area Category EventID Level Message Correlation
03/31/2024 22:30:41.362 OFFICEC2 (0x51a8) 0xdd8 SysConfigLiblet 945fr Medium IsAppGuard not set
03/31/2024 22:30:41.519 OFFICEC2 (0x51a8) 0x1590 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.17328.20184", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/WatchService\",\"ExeVer\":\"16.0.17328.20184\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}
03/31/2024 22:30:41.519 OFFICEC2 (0x51a8) 0x1590 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "zhnWOiFmqE6I+Wj1evjzJA.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.519 OFFICEC2 (0x51a8) 0x1590 Click-To-Run aznhv Medium ClientMonitor::Monitor - Start ServiceWatcher watcher.
03/31/2024 22:30:41.534 OFFICEC2 (0x51a8) 0x1590 Click-To-Run General Telemetry aznhc Medium ServiceWatcher::DoWatch {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "ServiceWatcher::DoWatch - Service is running."}
03/31/2024 22:30:41.550 OFFICEC2 (0x51a8) 0x1590 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.Watcher", "CV": "zhnWOiFmqE6I+Wj1evjzJA.9.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.550 OFFICEC2 (0x51a8) 0x1590 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.Watcher", "CV": "zhnWOiFmqE6I+Wj1evjzJA.9.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.550 OFFICEC2 (0x51a8) 0x1590 Click-To-Run General Telemetry bgodb Medium ServiceWatcher::SendMachineInfoState {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "{'ProductInfoInstalled','OneNoteFreeRetail.16_x-none_en-us|O365HomePremRetail.16_x-none_en-us','OfficeBitness','x64','WERMachineID',''}"}
03/31/2024 22:30:41.550 OFFICEC2 (0x51a8) 0x1590 Click-To-Run General Telemetry a232l Medium Watcher::Watch {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "Watcher is running successfully. {'WatcherName':'ServiceWatcher'}"}
03/31/2024 22:30:41.550 OFFICEC2 (0x51a8) 0x1590 Click-To-Run General Telemetry auqvk Medium MonitoredScope::ExecuteUnderStopWatch {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "Watcher::Watch - Watching ServiceWatcher.Approximate duration : 32 milliseconds."}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Click-To-Run azfea Medium ::wWinMain {"MachineId": "997a434aea26e0448da0e3a55e231037", "SessionID": "0435d6e2-21a9-457a-9c93-1da38461d40c", "GeoID": 244, "Ver": "16.0.17328.20184", "C2RClientVer": "16.0.17328.20184", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "zhnWOiFmqE6I+Wj1evjzJA.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.565 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "zhnWOiFmqE6I+Wj1evjzJA.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 10, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.10", "Activity.Duration": 19319, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 32, "Data.RejectedConfigCount": 0}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Telemetry Event bsq69 Monitorable Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}
03/31/2024 22:30:41.581 OFFICEC2 (0x51a8) 0x1590 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 11, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 10, "Data.SecondPassCount": 0}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtct Medium ActivityStarted {"Name": "Office.Identity.ConfigEnvironment", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Identity.ConfigEnvironment", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigEnvironment", "Flags": 30962256044949761, "InternalSequenceNumber": 12, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.1.1", "Activity.Duration": 119, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": false, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.IdP": 0, "Data.FederationProviderCode": 1, "Data.TelemetryRegionCode": 1, "Data.CachedFileName": "", "Data.CachedFileBaseHost": "", "Data.CachedFileTelemetryUrl": ""}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 14, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.1", "Activity.Duration": 2149, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 127, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 189, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 13, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.8.1.1", "Activity.Duration": 1996, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 5, "Data.Tag": "4qp6a", "Data.ConfigURLOrToken": 433, "Data.IsConfigUrl": true, "Data.Options": 0, "Data.StatusFlags": 1024, "Data.StatusFlagsTag": "4xe1z", "Data.ElapsedInMs": 362, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 12582913, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "B0ACA0B2-32BA-4AAC-93AE-D528090489D3", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.8.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.EndPoint", "CV": "zhnWOiFmqE6I+Wj1evjzJA.8.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Experimentation.EcsFetch", "CV": "zhnWOiFmqE6I+Wj1evjzJA.8.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 17, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.2", "Activity.Duration": 50, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 127, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 3, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.ConfigLoadComplete", "CV": "zhnWOiFmqE6I+Wj1evjzJA.8.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0xdd8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.LoadEcsConfig", "CV": "zhnWOiFmqE6I+Wj1evjzJA.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 19, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.3", "Activity.Duration": 53, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 126, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 2, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.628 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 20, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.4", "Activity.Duration": 56, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 127, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 2, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1590 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Experimentation.FeatureQueryBatched", "Flags": 33777005812056321, "InternalSequenceNumber": 21, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "e6e58d16cfb94942b795b4918258153a-765be17b-66ea-435e-8b55-5a128f3decd3-6873", "Data.Sequence": 0, "Data.Count": 55, "Data.Features": "[ { \"ID\" : 37, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"\", \"Q\" : 13.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Diagnostic.UAE.SilentAppExitVerifyElseDump\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.UAE.WERSessionFlags\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.StopWriteAfterCrashHangEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.CrashPersistenceProcessList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.1390353Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.TestGate.EnableDirectXDebugLayer\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:30.2332199Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACUsers\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:31.4647671Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACSecondSet\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:31.4811004Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.EnableWinCompForSACThirdSet\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:31.5056358Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.UseWincompInWin32\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:31.5056358Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseWincompInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:32.7982620Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.SendWinCompEnabledData\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:32.7982620Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.TestGate.UseHardwareDeviceInAutomation\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:36.0691749Z\", \"C\" : \"\", \"Q\" : 1.151862E6, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.EnableWin32HardwareAcceleration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-01T05:30:36.1279936Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.DrawGlyphPerfFixEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-01T05:30:37.6443378Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.CompositionOnlyAdapterSupportEnabled\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-01T05:30:37.9480037Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapterCount\", \"V\" : 5, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter1\", \"V\" : \"32902;0;0;0;8444249307883202;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter2\", \"V\" : \"32902;0;0;0;8444249307882967;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter3\", \"V\" : \"32902;0;0;0;8444249307883211;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter4\", \"V\" : \"32902;0;0;0;8444249307941927;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.AirSpace.BlockedGraphicsAdapter5\", \"V\" : \"32902;0;0;0;8725724284654296;2;0;0;0;0;0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6009820Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Graphics.SupportGDIPlusFactory\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:38.6333713Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Resiliency.CrashViaSpecialUserModeAPC.CG\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:39.1909514Z\", \"C\" : \"\", \"Q\" : 8.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.DisableTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:39.3784433Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AriaAdditionalProcessExclusionList\", \"V\" : \"\", \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:39.5503173Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.RulesRetrievalTimeInMins\", \"V\" : 30, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:40.2221896Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ULSQueueSizeInKilobytes\", \"V\" : 5120, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:40.8003181Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventBatchSize\", \"V\" : 128, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.1284406Z\", \"C\" : \"\", \"Q\" : 62.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.TriggerEventFlushDelay\", \"V\" : 86400, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.1284406Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.FeatureQueryLogger.EnableStaticLogging\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.1596958Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.NumberlinePosition\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.1909514Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Experimentation.OnboardAdaptiveSampling\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2221883Z\", \"C\" : \"\", \"Q\" : 5.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.SamplingRatePerTenThousand\", \"V\" : 200, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Floodgate.EnrichCollectionEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"1\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.ExcludeSessionFromSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuardVerbose\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.PrivacyGuard\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2378249Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Accessibility.Telemetry.SurfaceRegistration\", \"V\" : true, \"S\" : 11, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.2690654Z\", \"C\" : \"39\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.SharedText.CustomCloudFonts\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.3159604Z\", \"C\" : \"33\", \"Q\" : 0.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Security.OVF.FG.EnableVulnerabilityFilterLiblet\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.3159604Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.OWSA.UseDeferredCacheUpdateStrategy\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.3784356Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ShouldEnablePoPSupport\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.5190654Z\", \"C\" : \"\", \"Q\" : 16.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.OfficeWebServiceApiPopEnabled\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.5190654Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.AdaptiveSamplingEnabled\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.5659434Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.IsSamplingLogicV2EnabledChangeGate\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.5815768Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.Sampling.InsidersSampling\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.5815768Z\", \"C\" : \"\", \"Q\" : 46.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ServiceRequestTelemetry\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.6284423Z\", \"C\" : \"\", \"Q\" : 7.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.ConfigServiceTelemetry\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.6284423Z\", \"C\" : \"\", \"Q\" : 4.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.NoAggregationForConfigService\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.6284423Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Identity.LogConfigEnvironmentChange\", \"V\" : true, \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.6284423Z\", \"C\" : \"\", \"Q\" : 6.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 37, \"N\" : \"Microsoft.Office.Telemetry.AdaptiveSampling\", \"V\" : \"ofccermbulfb1p0\", \"S\" : 0, \"P\" : 0, \"T\" : \"2024-04-01T05:30:41.6284423Z\", \"C\" : \"\", \"Q\" : 92.0, \"M\" : 0, \"F\" : 57, \"G\" : \"Opt\" } ]"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 22, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.5", "Activity.Duration": 57, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 127, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 2, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Identity.ConfigService", "Flags": 30962256044949761, "InternalSequenceNumber": 23, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.6", "Activity.Duration": 55, "Activity.Count": 1, "Activity.AggMode": 2, "Activity.Success": false, "Activity.AggInterval": 1, "Data.Api": 7, "Data.Tag": "4w4hc", "Data.ConfigURLOrToken": 126, "Data.IsConfigUrl": false, "Data.Options": 0, "Data.StatusFlags": 4194304, "Data.StatusFlagsTag": "4vw3z", "Data.ElapsedInMs": 2, "Data.IsCacheDeferredEnabled": false, "Data.RequestFlags": 0, "Data.TelemetryRegionCode": 1, "Data.OriginalTelemetryRegionCode": 1, "Data.FederationTenantId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderId": "00000000-0000-0000-0000-000000000000", "Data.FederationProviderCode": 1, "Data.FederationSource": 2, "Data.CorrelationId": "00000000-0000-0000-0000-000000000000", "Data.ServiceStatusFlags": 1, "Data.ServiceStatusFlagsTag": "00000"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Identity.ConfigService", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.644 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401991169, "InternalSequenceNumber": 24, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5.1", "Activity.Duration": 781985, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}
03/31/2024 22:30:41.659 OFFICEC2 (0x51a8) 0x1cb8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "zhnWOiFmqE6I+Wj1evjzJA.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.17328.20184_X86_{3AD619CE-6621-4EA8-88F9-68F57AF8F324}"}
03/31/2024 22:30:41.659 OFFICEC2 (0x51a8) 0x1cb8 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401991169, "InternalSequenceNumber": 26, "Time": "2024-04-01T05:30:41Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "zhnWOiFmqE6I+Wj1evjzJA.5", "Activity.Duration": 853946, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true}