Timestamp	Process	TID	Area	Category	EventID	Level	Message	Correlation
11/16/2019 13:55:43.624	OFFICEC2 (0x4bc4)	0x5160		Orapi	cpknf	Medium	Successfully got the registry values	
11/16/2019 13:55:43.624	OFFICEC2 (0x4bc4)	0x5160		OfficeTelemetry_RuleProcessing	axbjw	Medium	OTele_ETW_TDC_LoadingRulesStarted {"ETW_EventId": 119, "ETW_Keywords": 4}	
11/16/2019 13:55:43.624	OFFICEC2 (0x4bc4)	0x5160		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.Telemetry.LoadXmlRules", "CV": "GEXIF6xxPk2tqIprS3rEfA.4.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.12130.20344_X86_{17C84518-71AC-4D3E-ADA8-8A6B4B7AC47C}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Click-To-Run General Telemetry	aqkhc	Medium	InitLogging {"MachineId": "da6a43ce3c90684dae09621eb52dd3ee", "SessionID": "881e509e-6d94-4ad7-a7fb-e35f0b937ed5", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "0.0", "ContextData": "{\"AppVVersion\":\"5.1.153\",\"Bitness\":\"64\",\"CommandLine\":\"/error PID=20232 ProcessName=\\\"Background task for Office flighting system\\\" UIType=3 ErrorSource=0x8b10082a ErrorCode=0x80004005 ShowUI=0\",\"ExeVer\":\"16.0.12130.20344\",\"IntegrityLevel\":\"0x3000\",\"Locale\":\"1033\",\"ModulePath\":\"C:\\\\Program Files\\\\Common Files\\\\Microsoft Shared\\\\ClickToRun\\\\OfficeC2RClient.exe\",\"OSVersion\":\"10.0\",\"ProcessType\":\"OfficeC2RClient\",\"ProcessorArch\":\"9\",\"ProductType\":\"3\",\"SecuritySessionId\":\"1\"}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Activity	bjtct	Medium	ActivityStarted {"Name": "Office.ClickToRun.C2RClient", "CV": "GEXIF6xxPk2tqIprS3rEfA.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.12130.20344_X86_{17C84518-71AC-4D3E-ADA8-8A6B4B7AC47C}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Click-To-Run	aq0lh	Medium	DoShowErrorUI: Process:20232 (Background task for Office flighting system), ErrorUIType:3, ErrorCode:0x80004005, ShowUI:false	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Click-To-Run	aq0k3	Medium	ErrorUI::Show: Process not listed as enabled UI: skipping package locked dialog	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Click-To-Run	azfea	Medium	::wWinMain {"MachineId": "da6a43ce3c90684dae09621eb52dd3ee", "SessionID": "881e509e-6d94-4ad7-a7fb-e35f0b937ed5", "GeoID": 244, "Ver": "0.0.0.0", "C2RClientVer": "0.0", "ContextData": "ClientExe complete. {'Action':'2','Result':'0'}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x2fe4		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.ClickToRun.C2RClient", "CV": "GEXIF6xxPk2tqIprS3rEfA.5", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.12130.20344_X86_{17C84518-71AC-4D3E-ADA8-8A6B4B7AC47C}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x5160		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.LoadXmlRules", "CV": "GEXIF6xxPk2tqIprS3rEfA.4.1", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.12130.20344_X86_{17C84518-71AC-4D3E-ADA8-8A6B4B7AC47C}"}	
11/16/2019 13:55:43.655	OFFICEC2 (0x4bc4)	0x5160		Activity	bjtcw	Medium	ActivityEnded {"Name": "Office.Telemetry.ProcessIdleQueueJob", "CV": "GEXIF6xxPk2tqIprS3rEfA.4", "ProcessIdentifier": "OfficeC2RClient.exe_16.0.12130.20344_X86_{17C84518-71AC-4D3E-ADA8-8A6B4B7AC47C}"}