Timestamp Process TID Area Category EventID Level Message Correlation 10/27/2025 09:57:03.533 WINWORD (0x1AC8) 0x27D4 Microsoft Word Identity Authentication Client 4rinx Medium FindUnmigratedIdentitiesImpl: IdP not supported by OneAuth {"SignInName":"dana.attie@corp.ovh.com"} 10/27/2025 09:57:04.581 WINWORD (0x1AC8) 0x2D60 Microsoft Word Next user licensing 9g9kv Monitorable DoesDirectoryExist - Directory does not exist and will not be created {"Path":"C:\\ProgramData\\Microsoft\\Office\\Licenses\\5\\Perpetual"} 10/27/2025 09:57:04.583 WINWORD (0x1AC8) 0x2D60 Microsoft Word Next user licensing 9g9kv Monitorable DoesDirectoryExist - Directory does not exist and will not be created {"Path":"C:\\Users\\dattie\\AppData\\Local\\Microsoft\\Office\\Licenses\\5\\Grace\\0"} 10/27/2025 09:57:05.584 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:05.593 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:05.611 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:05.626 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:05.645 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:05.661 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:05.661 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:05.664 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:06.733 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{1}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{2}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{3}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{4}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{5}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{6}"} 10/27/2025 09:57:06.734 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{7}"} 10/27/2025 09:57:06.735 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{8}"} 10/27/2025 09:57:06.735 WINWORD (0x1AC8) 0x16E8 Microsoft Word Syzygy 912b2 Medium Destroying namespace. {"Path":"O:{9}"} 10/27/2025 09:57:06.749 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{10}"} 10/27/2025 09:57:06.749 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{11}"} 10/27/2025 09:57:06.750 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{12}"} 10/27/2025 09:57:06.750 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{13}"} 10/27/2025 09:57:06.750 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{14}"} 10/27/2025 09:57:06.754 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{15}"} 10/27/2025 09:57:06.755 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{16}"} 10/27/2025 09:57:06.755 WINWORD (0x1AC8) 0x16E8 Microsoft Word Syzygy 912b2 Medium Destroying namespace. {"Path":"O:{17}"} 10/27/2025 09:57:06.762 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{18}"} 10/27/2025 09:57:06.763 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{19}"} 10/27/2025 09:57:06.763 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{20}"} 10/27/2025 09:57:06.763 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{21}"} 10/27/2025 09:57:06.763 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{22}"} 10/27/2025 09:57:06.764 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{23}"} 10/27/2025 09:57:06.764 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{24}"} 10/27/2025 09:57:06.764 WINWORD (0x1AC8) 0x16E8 Microsoft Word Disco 4vzbo Medium SHAM file does not exist, so we will not open it {"Path":"O:{25}"} 10/27/2025 09:57:06.764 WINWORD (0x1AC8) 0x16E8 Microsoft Word Syzygy 912b2 Medium Destroying namespace. {"Path":"O:{26}"} 10/27/2025 09:57:06.795 WINWORD (0x1AC8) 0x1214 Microsoft Word Identity Authentication CredUtil 4lww0 Medium [CredAccessorADAL] FindIdentityWithCachedCookie {"ResourceId":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.132 WINWORD (0x1AC8) 0xD50 Microsoft Word Identity Authentication CredUtil befi7 Medium [ADALHeaderInfo] IsADALDisabledViaSPOFlighting {"Header":"features=\"\""} 10/27/2025 09:57:07.133 WINWORD (0x1AC8) 0xD50 Microsoft Word IdentityAuthenticationCredStore awu1a Medium [COfficeCredStore] SetAuthScheme {"CredStoreKey":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.199 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:07.220 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:07.263 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:57:07.305 WINWORD (0x1AC8) 0x16E8 Microsoft Word IdentityAuthenticationCredStore awu1a Medium [COfficeCredStore] SetAuthScheme {"CredStoreKey":"https://autodiscover-s.outlook.com"} 10/27/2025 09:57:07.313 WINWORD (0x1AC8) 0x27D4 Microsoft Word Identity Authentication CredUtil az7lh Medium [AuthToken] AuthToken {"Server":"autodiscover-s.outlook.com"} 10/27/2025 09:57:07.519 WINWORD (0x1AC8) 0x27D4 Microsoft Word IdentityAuthenticationCredStore awu1a Medium [COfficeCredStore] SetAuthScheme {"CredStoreKey":"https://office.ovhcloud.tools"} 10/27/2025 09:57:07.525 WINWORD (0x1AC8) 0xD50 Microsoft Word Identity Authentication CredUtil az7lh Medium [AuthToken] AuthToken {"Server":"office.ovhcloud.tools"} 10/27/2025 09:57:07.556 WINWORD (0x1AC8) 0xD50 Microsoft Word IdentityAuthenticationCredStore awu1a Medium [COfficeCredStore] SetAuthScheme {"CredStoreKey":"https://autodiscover.office.ovhcloud.tools"} 10/27/2025 09:57:07.563 WINWORD (0x1AC8) 0x27D4 Microsoft Word Identity Authentication CredUtil az7lh Medium [AuthToken] AuthToken {"Server":"autodiscover.office.ovhcloud.tools"} 10/27/2025 09:57:07.675 WINWORD (0x1AC8) 0x1214 Microsoft Word IdentityAuthenticationCredStore awu08 Medium [COfficeCredStore] AddCreds {"CredStoreKey":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.685 WINWORD (0x1AC8) 0x219C Microsoft Word IdentityAuthenticationCredStore awu08 Medium [COfficeCredStore] AddCreds {"CredStoreKey":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.686 WINWORD (0x1AC8) 0x1214 Microsoft Word IdentityAuthenticationCredStore awu08 Medium [COfficeCredStore] AddCreds {"CredStoreKey":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.692 WINWORD (0x1AC8) 0x219C Microsoft Word Identity Authentication CredUtil 4lww0 Medium [CredAccessorADAL] FindIdentityWithCachedCookie {"ResourceId":"https://ovhsas.sharepoint.com"} 10/27/2025 09:57:07.693 WINWORD (0x1AC8) 0x219C Microsoft Word Identity Authentication CredUtil az7lh Medium [AuthToken] AuthToken {"Server":"ovhsas.sharepoint.com"} 10/27/2025 09:57:07.776 WINWORD (0x1AC8) 0x219C Microsoft Word ResourceInfoLiblet c3fdh Medium Mso::ResourceInfo::ParseHeaders: We got fresh server info {"ServerInfo":"UrlHash:; ServerType:5; SupportedProtocols:87; Version:16; Flags:7; CobaltMajor:1; CobaltMinor:6; MsDavExt:1; SharePointCloudCollabEnabled:true; IsWebUrlEmpty:false; WebUrlHash:; "} 10/27/2025 09:57:08.008 WINWORD (0x1AC8) 0x3F40 Microsoft Word ODP Sandbox Activation 5d7xn Monitorable Task to create OsfControl for PreWarm WV2 {"PredictedDelayForPreWarmWV2":5} 10/27/2025 09:57:08.013 WINWORD (0x1AC8) 0x3F40 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"Sites - OVH SAS"} 10/27/2025 09:57:08.013 WINWORD (0x1AC8) 0x3F40 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"OVH SAS"} 10/27/2025 09:57:08.013 WINWORD (0x1AC8) 0x3F40 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"Sites - OVH SAS"} 10/27/2025 09:57:08.343 WINWORD (0x1AC8) 0x47A4 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"Sites - OVH SAS"} 10/27/2025 09:57:08.343 WINWORD (0x1AC8) 0x47A4 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"OVH SAS"} 10/27/2025 09:57:08.343 WINWORD (0x1AC8) 0x47A4 Microsoft Word Document AutoCreate Locations 4i9yt Medium IsServiceValidForAutoCreate: Checking service properties {"ServiceName":"Sites - OVH SAS"} 10/27/2025 09:57:08.660 WINWORD (0x1AC8) 0x3F40 Microsoft Word Licensing client liblet a46x2 Medium HeartbeatAdapter::GetHeartbeatCacheFile - HeartbeatAdapter: Cache file location {"HeartbeatCacheFilePath":"C:\\ProgramData\\Microsoft\\Office\\Heartbeat"} 10/27/2025 09:57:10.069 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 4A00C0C4-A5D7-496F-BDD1-4A8E97678C8D 10/27/2025 09:57:10.080 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 4A00C0C4-A5D7-496F-BDD1-4A8E97678C8D 10/27/2025 09:57:10.089 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 4A00C0C4-A5D7-496F-BDD1-4A8E97678C8D 10/27/2025 09:57:13.044 WINWORD (0x1AC8) 0x2504 Microsoft Word ODP Sandbox Activation 5d7xn Monitorable Task to cleanUp the OsfControl for PreWarm WV2 {"PredictedDelayForPreWarmWV2":300} 10/27/2025 09:57:49.739 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:49.755 WINWORD (0x1AC8) 0x47A4 Microsoft Word OART Imaging Telemetry 4l5hq Medium Blip Properties {"EmbedFormat":"VSO_6096175","LinkFormat":"VSO_6096175"} 10/27/2025 09:57:49.761 WINWORD (0x1AC8) 0x47A4 Microsoft Word Word Fast Coauth 49y8c Medium Missing a Prague MarkerType for a xchar with sprmCFSpec {"xchar":1} 10/27/2025 09:59:15.407 WINWORD (0x1AC8) 0x47A4 Microsoft Word Syzygy 912b2 Medium Destroying namespace. {"Path":"O:{17}"}