Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
02/08/2026 05:41:35.283	OFFICEC2 (0x3160)	0x3c38		OfficeTelemetry_RuleProcessing	axbjw	Medium	OTele_ETW_TDC_LoadingRulesStarted {"ETW_EventId": 119, "ETW_Keywords": 4}	
02/08/2026 05:41:35.284	OFFICEC2 (0x3160)	0x3c38		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.LoadXmlRules", "CV": "IANjKyZHtEiVIjMTCaOOCA.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.312	OFFICEC2 (0x3160)	0x3c38		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "IANjKyZHtEiVIjMTCaOOCA.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.312	OFFICEC2 (0x3160)	0x3c38		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 8, "Time": "2026-02-08T02:41:35Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "IANjKyZHtEiVIjMTCaOOCA.5.1", "Activity.Duration": 28412, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"}	
02/08/2026 05:41:35.313	OFFICEC2 (0x3160)	0x3c38		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "IANjKyZHtEiVIjMTCaOOCA.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.313	OFFICEC2 (0x3160)	0x3c38		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 9, "Time": "2026-02-08T02:41:35Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "IANjKyZHtEiVIjMTCaOOCA.5", "Activity.Duration": 29914, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Click-To-Run General Telemetry	aqkhc	Medium	InitLogging {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/WatchService\",\"ExeVer\":\"16.0.14332.20621\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"3\",\"SecuritySessionId\":\"0\"}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "IANjKyZHtEiVIjMTCaOOCA.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Click-To-Run	azfea	Medium	::wWinMain {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "IANjKyZHtEiVIjMTCaOOCA.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "IANjKyZHtEiVIjMTCaOOCA.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "IANjKyZHtEiVIjMTCaOOCA.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.371	OFFICEC2 (0x3160)	0x4294		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "IANjKyZHtEiVIjMTCaOOCA.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "IANjKyZHtEiVIjMTCaOOCA.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "IANjKyZHtEiVIjMTCaOOCA.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Activity	bjtco	Medium	DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "IANjKyZHtEiVIjMTCaOOCA.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "IANjKyZHtEiVIjMTCaOOCA.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{2B630320-4726-48B4-9522-331309A38E08}"}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2026-02-08T02:41:35Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "IANjKyZHtEiVIjMTCaOOCA.10", "Activity.Duration": 72, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 1, "Data.RejectedConfigCount": 0}	
02/08/2026 05:41:35.372	OFFICEC2 (0x3160)	0x4294		Telemetry Event	biyhq	Medium	SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401990913, "InternalSequenceNumber": 14, "Time": "2026-02-08T02:41:35Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 13, "Data.SecondPassCount": 0}