Last Windows update has seemingly introduced Office related log files in C:\Windows\Temp

NeilF · 19 Aug 2023 at 09:05

I've noticed this on two of my machines and on a friends, if you look in C:\Windows\Temp there lots of log files:-
[PCName]-[Date]-[Time].log

eg:-
SERVERPC-20230818-0915.log

EDIT: I think it's associated with an odd folder C:\ProgramData\regid.1991-06.com.microsoft

NeilF · 19 Aug 2023 at 11:39

This article seems to discuss the log files in question - https://borncity.com/win/2023/06/08...looded-with-host-name-yyymmdd-hhmm-log-files/

Something to possibly do with Office Click to run?

NeilF · 19 Aug 2023 at 14:20

These log files are popping up every 30-60mins, on both my machines, and indeed on a friend's PC who I spoke to about it too.

First dozen or so of contents from one of them on my gaming PC:-

Code:

Timestamp    Process    TID    Area    Category    EventID    Level    Message    Correlation
08/19/2023 11:53:01.098    OFFICEC2 (0x3918)    0x3928        Click-To-Run General Telemetry    aqkhc    Medium    InitLogging {"MachineId": "c4854fa962318246afce25446cff2814", "SessionID": "d5cf6271-2f70-4e0f-8bb6-6cc0ab0a6309", "GeoID": 242, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/WatchService\",\"ExeVer\":\"16.0.16626.20170\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"2057\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}   
08/19/2023 11:53:01.102    OFFICEC2 (0x3918)    0x3928        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "07dESMbKEUCX/ZqXcA9+jQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.139    OFFICEC2 (0x3918)    0x3928        Click-To-Run    azfea    Medium    ::wWinMain {"MachineId": "c4854fa962318246afce25446cff2814", "SessionID": "d5cf6271-2f70-4e0f-8bb6-6cc0ab0a6309", "GeoID": 242, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"}   
08/19/2023 11:53:01.139    OFFICEC2 (0x3918)    0x3928        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "07dESMbKEUCX/ZqXcA9+jQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.144    OFFICEC2 (0x3918)    0x3928        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.150    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.155    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.155    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.159    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.166    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.167    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.168    OFFICEC2 (0x3918)    0x3928        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{4844B7D3-CAC6-4011-97FD-9A97700F7E8D}"}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-08-19T10:53:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "07dESMbKEUCX/ZqXcA9+jQ.10", "Activity.Duration": 24763, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}   
08/19/2023 11:53:01.183    OFFICEC2 (0x3918)    0x3928        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 10, "Time": "2023-08-19T10:53:01Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 9, "Data.SecondPassCount": 0}

EDIT:-
And similar from my server PC:-

Code:

Timestamp    Process    TID    Area    Category    EventID    Level    Message    Correlation
08/19/2023 13:23:21.021    OFFICEC2 (0x44cc)    0x38dc        OfficeTelemetry_PerfMetrics    axbjw    Medium    RuleFieldNamesImpact {"ETW_EventId": 196, "ETW_Keywords": 128, "cbMemory": 2878, "count": 95}    
08/19/2023 13:23:21.030    OFFICEC2 (0x44cc)    0x3334        Click-To-Run General Telemetry    aqkhc    Medium    InitLogging {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"ExeVer\":\"16.0.16626.20170\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"2057\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"1\",\"SecuritySessionId\":\"0\"}"}    
08/19/2023 13:23:21.030    OFFICEC2 (0x44cc)    0x3334        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "ZsuUmRRFgEOLyHbcPdEASg.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.031    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    8f5y1    Medium    WaitForFlightInfo {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"}    
08/19/2023 13:23:21.031    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.032    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    bhltg    Medium    Core::GetFlightData {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.16626.20170", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"}    
08/19/2023 13:23:21.033    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    cfbm2    Medium    DoFrequentUpdates {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"}    
08/19/2023 13:23:21.033    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    b5k1x    Medium    DoFrequentUpdates {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"81185482\"}"}    
08/19/2023 13:23:21.034    OFFICEC2 (0x44cc)    0x3334        Click-To-Run    azfea    Medium    ::wWinMain {"MachineId": "6f22647105f4d942ade326bb56c1fff4", "SessionID": "659f3af5-ce48-4b9e-a2ce-0de44f2bea9d", "GeoID": 244, "Ver": "16.0.16626.20170", "C2RClientVer": "16.0.16626.20170", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"}    
08/19/2023 13:23:21.034    OFFICEC2 (0x44cc)    0x3334        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "ZsuUmRRFgEOLyHbcPdEASg.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.035    OFFICEC2 (0x44cc)    0x3334        Activity    bjtct    Medium    ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.3", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.036    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.038    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.040    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.12", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.13", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.041    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.14", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.15", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.16", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.17", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.18", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.19", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.042    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.20", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.21", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.22", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.23", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.044    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.24", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.045    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.25", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.26", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.27", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.28", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.29", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.30", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.31", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.32", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.33", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.046    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.34", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Activity    bjtco    Medium    DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10.35", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "ZsuUmRRFgEOLyHbcPdEASg.10", "Activity.Duration": 12005, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 35, "Data.RejectedConfigCount": 0}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Experimentation.LoadingFirstSessionCache", "IsFromRule": false}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    bsq69    Monitorable    Deactivated event detected. {"EventName": "Office.Licensing.Tenant.InitTenantId", "IsFromRule": false}    
08/19/2023 13:23:21.047    OFFICEC2 (0x44cc)    0x3334        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401991169, "InternalSequenceNumber": 10, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 9, "Data.SecondPassCount": 0}    
08/19/2023 13:23:21.049    OFFICEC2 (0x44cc)    0x38dc        Activity    bjtcw    Medium    ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "ZsuUmRRFgEOLyHbcPdEASg.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.16626.20170_X86_{9994CB66-4514-4380-8BC8-76DC3DD1004A}"}    
08/19/2023 13:23:21.049    OFFICEC2 (0x44cc)    0x38dc        Telemetry Event    biyhq    Medium    SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401991169, "InternalSequenceNumber": 11, "Time": "2023-08-19T12:23:21Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "ZsuUmRRFgEOLyHbcPdEASg.5.1", "Activity.Duration": 41641, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}

NeilF · 19 Aug 2023 at 15:58

I certainly came up from older version of office before getting 365. Heck on my server PC I even have Add/Remove for Microsoft Office Professional 2003 listed