Timestamp Process TID Area Category EventID Level Message Correlation 02/04/2026 11:59:23.431 OFFICEC2 (0x245c) 0x387c Orapi cpknf Medium Successfully got the registry values 02/04/2026 11:59:23.431 OFFICEC2 (0x245c) 0x387c OfficeTelemetry_RuleProcessing axbjw Medium OTele_ETW_TDC_LoadingRulesStarted {"ETW_EventId": 119, "ETW_Keywords": 4} 02/04/2026 11:59:23.431 OFFICEC2 (0x245c) 0x387c Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.LoadXmlRules", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.433 OFFICEC2 (0x245c) 0x387c OfficeTelemetry_PerfMetrics axbjw Medium RuleFieldNamesImpact {"ETW_EventId": 196, "ETW_Keywords": 128, "cbMemory": 2898, "count": 96} 02/04/2026 11:59:23.438 OFFICEC2 (0x245c) 0x33bc Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/frequentupdate SCHEDULEDTASK displaylevel=False\",\"ExeVer\":\"16.0.14332.20621\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"3\",\"SecuritySessionId\":\"0\"}"} 02/04/2026 11:59:23.438 OFFICEC2 (0x245c) 0x33bc Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.474 OFFICEC2 (0x245c) 0x33bc Click-To-Run 8f5y1 Medium WaitForFlightInfo {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"message\":\"Wait complete\",\"timeSlept\":\"0\",\"gotFlights\":\"True\"}"} 02/04/2026 11:59:23.482 OFFICEC2 (0x245c) 0x33bc Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOfficeHelperAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 02/04/2026 11:59:23.482 OFFICEC2 (0x245c) 0x33bc Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseOutlookShareAddon','overrideValue':'','flightData':'','returnValue':'unknown'}"} 02/04/2026 11:59:23.482 OFFICEC2 (0x245c) 0x33bc Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnInstallConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"} 02/04/2026 11:59:23.482 OFFICEC2 (0x245c) 0x33bc Click-To-Run bhltg Medium Core::GetFlightData {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{'flightIdentifier':'Microsoft.Office.Click2Run.UseTeamsOnUpdateConsumer','overrideValue':'','flightData':'','returnValue':'unknown'}"} 02/04/2026 11:59:23.483 OFFICEC2 (0x245c) 0x33bc Click-To-Run cfbm2 Medium DoFrequentUpdates {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"message\":\"Running frequent updates\",\"hours\":\"24\"}"} 02/04/2026 11:59:23.483 OFFICEC2 (0x245c) 0x33bc Click-To-Run b5k1x Medium DoFrequentUpdates {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"message\":\"Less than a day since last update run, just trying to apply!\",\"time\":\"0\"}"} 02/04/2026 11:59:23.483 OFFICEC2 (0x245c) 0x33bc Click-To-Run azfea Medium ::wWinMain {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "ClientExe complete. {'Action':'19','Result':'0'}"} 02/04/2026 11:59:23.483 OFFICEC2 (0x245c) 0x33bc Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtct Medium ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtcw Medium ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtct Medium ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtcw Medium ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "kc0YAWtYYk+ngdvN4gw9WQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{0118CD91-586B-4F62-A781-DBCDE20C3D59}"} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2026-02-04T08:59:23Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "kc0YAWtYYk+ngdvN4gw9WQ.10", "Activity.Duration": 97, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 1, "Data.RejectedConfigCount": 0} 02/04/2026 11:59:23.484 OFFICEC2 (0x245c) 0x33bc Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401990913, "InternalSequenceNumber": 14, "Time": "2026-02-04T08:59:23Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 13, "Data.SecondPassCount": 0}