Timestamp Process TID Area Category EventID Level Message Correlation 12/31/2099 12:36:27.981 OFFICEC2 (0x4304) 0x299c Telemetry Rules Engine bn9wt Medium DataCollector::ShouldDownloadNewRules 12/31/2099 12:36:27.982 OFFICEC2 (0x4304) 0x299c Telemetry Rules Engine b0on0 Medium initAudienceMetadata.enter 12/31/2099 12:36:27.982 OFFICEC2 (0x4304) 0x299c Telemetry Rules Engine b0on1 Medium initAudienceMetadata.exit 12/31/2099 12:36:27.982 OFFICEC2 (0x4304) 0x299c Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DownloadNexusRules", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Activity bjtct Medium ActivityStarted {"Name": "Office.Experimentation.EcsFetch", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.EndPoint", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.6.1.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Experiment Liblet 9x5gs Medium RegistryWrapper::ReadFromOrapi > Registry read failed, perhaps key not present yet. {"Path": "Microsoft.Office.Experimentation.Configs.EcsPersistentStore", "Key": "PerpetualLicenseInfo"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Experiment Liblet 9x5gs Medium RegistryWrapper::ReadFromOrapi > Registry read failed, perhaps key not present yet. {"Path": "Microsoft.Office.Experimentation.Configs.EcsPersistentStore", "Key": "LicenseCategoryInfo"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Experiment Liblet 9x5gs Medium RegistryWrapper::ReadFromOrapi > Registry read failed, perhaps key not present yet. {"Path": "Microsoft.Office.Experimentation.Configs.EcsPersistentStore", "Key": "LicenseSKUInfo"} 12/31/2099 12:36:27.984 OFFICEC2 (0x4304) 0x42c8 Experiment Liblet 9x5gs Medium RegistryWrapper::ReadFromOrapi > Registry read failed, perhaps key not present yet. {"Path": "Microsoft.Office.Experimentation.Configs.EcsPersistentStore", "Key": "ProviderId"} 12/31/2099 12:36:28.189 OFFICEC2 (0x4304) 0x2318 Click-To-Run General Telemetry aqkhc Medium InitLogging {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "16.0.14332.20621", "ContextData": "{\"AppVVersion\":\"10.0.22000.2116\",\"Bitness\":\"64\",\"CommandLine\":\"/WatchService\",\"ExeVer\":\"16.0.14332.20621\",\"IntegrityLevel\":\"0x4000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"3\",\"SecuritySessionId\":\"0\"}"} 12/31/2099 12:36:28.189 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.189 OFFICEC2 (0x4304) 0x2318 Click-To-Run aznhv Medium ClientMonitor::Monitor - Start ServiceWatcher watcher. 12/31/2099 12:36:28.189 OFFICEC2 (0x4304) 0x2318 Click-To-Run General Telemetry aznhc Medium ServiceWatcher::DoWatch {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "ServiceWatcher::DoWatch - Service is running."} 12/31/2099 12:36:28.190 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.ClickToRun.Watcher", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.7.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.190 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.Watcher", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.7.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.191 OFFICEC2 (0x4304) 0x2318 Click-To-Run General Telemetry bgodb Medium ServiceWatcher::SendMachineInfoState {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "{'ProductInfoInstalled','VisioPro2021Volume.16_x-none_en-us|ProPlus2021Volume.16_x-none_en-us|ProjectPro2021Volume.16_x-none_en-us','OfficeBitness','x64','WERMachineID',''}"} 12/31/2099 12:36:28.191 OFFICEC2 (0x4304) 0x2318 Click-To-Run General Telemetry a232l Medium Watcher::Watch {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "Watcher is running successfully. {'WatcherName':'ServiceWatcher'}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Click-To-Run General Telemetry auqvk Medium MonitoredScope::ExecuteUnderStopWatch {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "Watcher::Watch - Watching ServiceWatcher.Approximate duration : 0 milliseconds."} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Click-To-Run azfea Medium ::wWinMain {"MachineId": "530bed0990cf18419e05e14bda7c169c", "SessionID": "ca3f78d4-03cb-4538-806c-31cccaea7f5f", "GeoID": 244, "Ver": "16.0.14332.20624", "C2RClientVer": "16.0.14332.20621", "ContextData": "ClientExe complete. {'Action':'11','Result':'0'}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.7", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.8", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.9", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Telemetry.DynamicConfig.ParseJsonConfig", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.10.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.192 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DynamicConfig.FetchConfigs", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.10", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.193 OFFICEC2 (0x4304) 0x2318 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.DynamicConfig.FetchConfigs", "Flags": 33777014401990913, "InternalSequenceNumber": 13, "Time": "2099-12-31T09:36:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "6Yrc8LkuDkmb0kt0GWykGQ.10", "Activity.Duration": 69, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Data.RejectedConfigsList": "", "Data.ParsedConfigCount": 1, "Data.RejectedConfigCount": 0} 12/31/2099 12:36:28.193 OFFICEC2 (0x4304) 0x2318 Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.FlushEventBuffer", "Flags": 33777014401990913, "InternalSequenceNumber": 14, "Time": "2099-12-31T09:36:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Data.FirstPassCount": 13, "Data.SecondPassCount": 0} 12/31/2099 12:36:28.193 OFFICEC2 (0x4304) 0x42c8 Activity bjtcw Medium ActivityEnded {"Name": "Office.Experimentation.EcsFetch", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.6.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.193 OFFICEC2 (0x4304) 0x42c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.ConfigLoadComplete", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.6.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.193 OFFICEC2 (0x4304) 0x42c8 Activity bjtco Medium DroppedAggregatedActivity {"Name": "Office.Experimentation.LoadEcsConfig", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.6", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.984 OFFICEC2 (0x4304) 0x299c Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.DownloadNexusRules", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.5.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.985 OFFICEC2 (0x4304) 0x299c Activity bjtct Medium ActivityStarted {"Name": "Office.Telemetry.LoadXmlRules", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.5.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.988 OFFICEC2 (0x4304) 0x299c Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.5.2", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.988 OFFICEC2 (0x4304) 0x299c Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.LoadXmlRules", "Flags": 33777014401990913, "InternalSequenceNumber": 18, "Time": "2099-12-31T09:36:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "6Yrc8LkuDkmb0kt0GWykGQ.5.2", "Activity.Duration": 3101, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true, "Activity.Result.Code": 0, "Activity.Result.Type": "HRESULT"} 12/31/2099 12:36:28.988 OFFICEC2 (0x4304) 0x299c Activity bjtcw Medium ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.989 OFFICEC2 (0x4304) 0x299c Telemetry Event biyhq Medium SendEvent {"EventName": "Office.Telemetry.ProcessIdleQueueJob", "Flags": 33777014401990913, "InternalSequenceNumber": 19, "Time": "2099-12-31T09:36:28Z", "AriaTenantToken": "f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405", "Contract": "Office.System.Activity", "Activity.CV": "6Yrc8LkuDkmb0kt0GWykGQ.5", "Activity.Duration": 1008278, "Activity.Count": 1, "Activity.AggMode": 0, "Activity.Success": true} 12/31/2099 12:36:28.989 OFFICEC2 (0x4304) 0x2318 Activity bjtct Medium ActivityStarted {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"} 12/31/2099 12:36:28.989 OFFICEC2 (0x4304) 0x2318 Activity bjtcw Medium ActivityEnded {"Name": "Office.Licensing.Tenant.InitTenantId", "CV": "6Yrc8LkuDkmb0kt0GWykGQ.11", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.14332.20621_X86_{F0DC8AE9-2EB9-490E-9BD2-4B74196CA419}"}