Last Windows update has seemingly introduced Office related log files in C:\Windows\Temp

Soldato
Joined
15 Nov 2003
Posts
14,411
Location
Marlow
I've noticed this on two of my machines and on a friends, if you look in C:\Windows\Temp there lots of log files:-
[PCName]-[Date]-[Time].log

eg:-
SERVERPC-20230818-0915.log


EDIT: I think it's associated with an odd folder C:\ProgramData\regid.1991-06.com.microsoft
 
Last edited:
Can't say what the log file is without seeing some of the content but the "regid.1991-06.com.microsoft" folder is just a place were MS stores .swidtag. Basically text files, so you can open them with notepad or whatever, with information on what version of software is installed. They're typically named after what they relate to so on my machine i only have a Windows-10-pro.swidtag. (they're typically used when something does a version check, like when checking for updates online, and they're meant to make it quicker/easier than trawling through the registry)

ProgramData is used by applications to store data as it's not as restrictive, permissions wise, as Program Files. Think of it a bit like a machine wide version of each users AppData\Local folder.
 
Last edited:
Yes but without seeing some of the content it's impossible to say how relevant any of that is.

It could be Office click to run actually doing something or it could simply be that Windows update or something else attempted to do something with that feature and didn't find it.

log files exist for a reason, if you don't open/read it there's no way to know what information is in it. :rolleyes:
 
These log files are popping up every 30-60mins, on both my machines, and indeed on a friend's PC who I spoke to about it too.

First dozen or so of contents from one of them on my gaming PC:-
Code:
Timestamp    Process    TID    Area    Category    EventID    Level    Message    Correlation
08/19/2023 11:53:01.098    OFFICEC2 (0x3918)    0x3928        Click-To-Run General Telemetry    aqkhc    Medium    InitLogging {"MachineId": "c4854fa962318246afce25446cff2814", "SessionID": "d5cf6271-2f70-4e0f-8bb6-6cc0ab0a6309", "GeoID": 242, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/WatchService\",\"ExeVer\":\"16.0.16626.20170\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"2057\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}   
08/19/2023 11:53:01.102    OFFICEC2 (0x3918)    0x3928        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "07dESMbKEUCX/ZqXcA9+jQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.139    OFFICEC2 (0x3918)    0x3928        Click-To-Run    azfea    Medium    ::wWinMain {"MachineId": "c4854fa962318246afce25446cff2814", "SessionID": "d5cf6271-2f70-4e0f-8bb6-6cc0ab0a6309", "GeoID": 242, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"}   
08/19/2023 11:53:01.139    OFFICEC2 (0x3918)    0x3928        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "07dESMbKEUCX/ZqXcA9+jQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.144    OFFICEC2 (0x3918)    0x3928        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.155    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.155    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.159    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-08-19T10:53:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "Activity.Duration": 24763, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 10, "Time": "2023-08-19T10:53:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 9, "Data.SecondPassCount": 0}

EDIT:-
And similar from my server PC:-
Code:
Timestamp    Process    TID    Area    Category    EventID    Level    Message    Correlation
08/19/2023 13:23:21.021    OFFICEC2 (0x44cc)    0x38dc        OfficeTelemetry_PerfMetrics    axbjw    Medium    RuleFieldNamesImpact {"ETW_EventId": 196, "ETW_Keywords": 128, "cbMemory": 2878, "count": 95}    
08/19/2023 13:23:21.030    OFFICEC2 (0x44cc)    0x3334        Click-To-Run General Telemetry    aqkhc    Medium    InitLogging {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"ExeVer\":\"16.0.16626.20170\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"2057\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}    
08/19/2023 13:23:21.030    OFFICEC2 (0x44cc)    0x3334        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "ZsuUmRRFgEOLyHbcPdEASg.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.031    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    8f5y1    Medium    WaitForFlightInfo {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}    
08/19/2023 13:23:21.031    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.033    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    cfbm2    Medium    DoFrequentUpdates {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"}    
08/19/2023 13:23:21.033    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    b5k1x    Medium    DoFrequentUpdates {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"81185482\"}"}    
08/19/2023 13:23:21.034    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    azfea    Medium    ::wWinMain {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"}    
08/19/2023 13:23:21.034    OFFICEC2 (0x44cc)    0x3334        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "ZsuUmRRFgEOLyHbcPdEASg.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.035    OFFICEC2 (0x44cc)    0x3334        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.038    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.045    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "Activity.Duration": 12005, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 10, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 9, "Data.SecondPassCount": 0}    
08/19/2023 13:23:21.049    OFFICEC2 (0x44cc)    0x38dc        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "ZsuUmRRFgEOLyHbcPdEASg.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.049    OFFICEC2 (0x44cc)    0x38dc        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401991169, "InternalSequenceNumber": 11, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "ZsuUmRRFgEOLyHbcPdEASg.5.1", "Activity.Duration": 41641, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}
 
Last edited:
Yes it's click to run, I'm guessing you both have office 2016 installed.

Click to run is basically a method of installing/running office; It allows you to run office while streaming the rest of the install files in the background and it also runs office in a sandbox. (that link relates to office 2010 when they first introduced it but the principals described are the same).

You can pretty much ignore them or if they're bugging you that much you could try changing the 'Microsoft Office Click-to-Run' service from automatic to disabled, however if you're going to disable the service you'd really need to restart the machine and test that disabling it hasn't caused issues with running office.
 
I certainly came up from older version of office before getting 365. Heck on my server PC I even have Add/Remove for Microsoft Office Professional 2003 listed :)
 
Back
Top Bottom