Hi Andy,
Content did some research on this and I shall address the different inputs shared - 1. From the .NDI file we reviewed, we found WMI evidence and File evidence for Office 2019 and 2016 which consisted of Click-to-Run .exe files and other comp...
Thank you for the files shared. We are checking in with our Content team on the current recognition rules, to verify whether this is expected or needs to be changed. I shall post an update here once I have feedback.