| bd7a8d07a6a3d0b10b943a17dedd5f3a23eea53b0d0babe6d6ed452c24f5710d |
[68a178f000fcf6f09fa43ed4, 68a17c6313d38093271e4d7d, 68a17d32b8e0917a96ab5183, 68a2ca7bf1b5d070157fa50a, 68a2cde79ef546c806451f9b, 68a2cebeea2bec6dd453ddc6, 68a41c1ee32af9c7fb4f586d, 68a4205b652c2f8e7aac8983, 68a4212d6d0e46c2f152938d, 68a56dbbc331ff607b884d4b, 68a5711ca55e4f736b7b2bfa, 68a571f415ffa42bc82736b5] |
[2] |
[WVUHPAN] |
[I-PANHS, i-NPANHS, U-PanHS] |
[HS] |
[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T06:30:01Z, 2025-08-17T06:51:01Z, 2025-08-18T06:30:01Z, 2025-08-18T06:51:00Z, 2025-08-18T06:51:02Z, 2025-08-19T06:30:02Z, 2025-08-19T06:51:02Z, 2025-08-19T06:51:00Z, 2025-08-20T06:30:01Z, 2025-08-20T06:51:00Z, 2025-08-20T06:51:02Z] |
[67922bcfb6b909fcf4c6066aae296c06] |
[5cecc6335811f9bf1365738b97bd0a717a78be24] |
[f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2] |
[c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014] |
[172.17.252.76, 172.17.253.167, 172.25.18.242] |
[172.17.252.76, 172.17.253.167, 172.25.18.242] |
3 |
Success |
userlist.bat |
C:\Program Files\Quest Software\Management Shell for AD\ |
|
238 |
67922bcfb6b909fcf4c6066aae296c06 |
|
|
Not Signed |
2018-10-17 14:35:55 +0000 UTC |
2010-08-18 13:45:20 +0000 UTC |
5cecc6335811f9bf1365738b97bd0a717a78be24 |
f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2 |
c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014 |
2025-08-09 04:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d1d29bfdf0938484bad3df1024847c2b6cc6310c3e1f55236e1f54593094f054 |
[68a1ac1ec193963d0c0ace4e, 68a29ad1e6b70fa9edec4351, 68a2b972d6f29d8003151b81, 68a2fff19b21a43c06982f02] |
[2] |
[SYSTEM] |
[i-nCusterqs1, i-nQS, i-nMrristnnqs1] |
[NT AUTHORITY] |
[E:\QS1\QAU\Info\SystemInfo.bat, D:\QS1\QAU\Info\SystemInfo.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe] |
[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe] |
[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z] |
[6e5cd2985085a14f0365ac9f09224978] |
[b8c1668ef28fa7f83d9ead6d14705e95bc335e5b] |
[eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83] |
[dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989] |
[172.17.21.68, 172.17.252.137, 172.17.21.65] |
[172.17.21.68, 172.17.252.137, 172.17.21.65] |
3 |
Success |
SystemInfo.bat |
C:\QS1\QAU\Info\ |
|
70 |
6e5cd2985085a14f0365ac9f09224978 |
|
|
Not Signed |
2019-10-22 11:10:42 +0000 UTC |
2019-10-22 11:10:42 +0000 UTC |
b8c1668ef28fa7f83d9ead6d14705e95bc335e5b |
eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83 |
dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989 |
2025-07-16 14:19:51 +0000 UTC |
[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1aac11b17b781bae4155142b446ee8c2a50ee6b74d487c177c219a582fc7b1fe |
[68a61ba94647e99a42f1f95e, 68a61c2b9f20edac12c008b0, 68a61c2b9f20edac12c008b1] |
[2] |
[SYSTEM] |
[dp-ruby01, DP-RUBY02, DP-RUBY03] |
[NT AUTHORITY] |
[C:\Windows\CCM\ScriptStore\5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1] |
[Servers] |
[Servers Audit] |
[v2309.897] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\CCM\CcmExec.exe] |
[2025-08-20T19:01:55Z, 2025-08-20T19:04:06Z, 2025-08-20T19:04:07Z] |
[d7d030bd33393f5a761bd2d6eb2e6f51] |
[58918d62b1b53da8534b7b47f29ad298d71b7e4e] |
[b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d] |
[72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847] |
[172.17.120.11, 172.17.120.10, 172.17.120.20] |
[172.17.120.11, 172.17.120.10, 172.17.120.20] |
3 |
Success |
5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1 |
C:\Windows\CCM\ScriptStore\ |
|
134 |
d7d030bd33393f5a761bd2d6eb2e6f51 |
|
|
Not Signed |
2025-05-20 16:34:58 +0000 UTC |
2025-05-20 16:34:58 +0000 UTC |
58918d62b1b53da8534b7b47f29ad298d71b7e4e |
b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d |
72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847 |
2025-08-20 19:02:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fb39dc9b0ead7b6e038a358e3ca9faae5a39570bfaf3834bf8c75aa2912698a5 |
[68a1646609d3c08e7ea8cecc, 68a16470d97d50d8da4abf7a, 68a18f14b89992b111df5d02] |
[2] |
[SYSTEM] |
[i-nLeicaSAM03, i-nleicasam02, nt-UHCleica] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Aperio\DatabaseCheck\Check-GT450-Database-Integrity.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:11:00Z, 2025-08-17T08:11:00Z] |
[1a72b94c58d7e7f137a18e1a0c18914a] |
[4ba6ef15a0cd389d15ad080de945a334373c9fc6] |
[7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c] |
[76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee] |
[172.17.253.15, 172.17.253.103, 172.25.17.137] |
[172.17.253.15, 172.17.253.103, 172.25.17.137] |
3 |
Success |
Check-GT450-Database-Integrity.ps1 |
C:\Program Files (x86)\Aperio\DatabaseCheck\ |
|
1399 |
1a72b94c58d7e7f137a18e1a0c18914a |
|
|
Not Signed |
2024-08-05 16:07:43 +0000 UTC |
2024-07-29 14:50:04 +0000 UTC |
4ba6ef15a0cd389d15ad080de945a334373c9fc6 |
7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c |
76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee |
2025-08-10 05:11:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 18f94c227e2d517cfb94721f65e950efbfeb23990fcf7dcbc48bbbf8ba8e3e68 |
[68a1ac1ec193963d0c0ace4f, 68a29ad1e6b70fa9edec4352, 68a2b972d6f29d8003151b82, 68a2fff19b21a43c06982f03] |
[2] |
[SYSTEM] |
[i-nCusterqs1, i-nQS, i-nMrristnnqs1] |
[NT AUTHORITY] |
[E:\QS1\QAU\Info\SerialNumber.bat, D:\QS1\QAU\Info\SerialNumber.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe] |
[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe] |
[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z] |
[1dd0238e6d527954d3190764187d6a05] |
[c542ac2cea1b430cf3ae7b91936b57b20a72a2a7] |
[062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589] |
[9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c] |
[172.17.21.68, 172.17.252.137, 172.17.21.65] |
[172.17.21.68, 172.17.252.137, 172.17.21.65] |
3 |
Success |
SerialNumber.bat |
C:\QS1\QAU\Info\ |
|
64 |
1dd0238e6d527954d3190764187d6a05 |
|
|
Not Signed |
2019-12-18 12:10:54 +0000 UTC |
2019-12-18 12:10:54 +0000 UTC |
c542ac2cea1b430cf3ae7b91936b57b20a72a2a7 |
062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589 |
9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c |
2025-07-16 14:19:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fa3402afae16af05fbba53d005803e74825eb1a222d135ed8b0f2009514bf45d |
[68a62c57d96ab29dcabe19ab, 68a62d5b4fa1f463a5481cd3] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] |
[80cbeb9ab7ad2d7f01f2a53273bf59a6] |
[9db1f88469a23adaabce2f09c7b0acc618bb174f] |
[0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9] |
[19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.ECM |
499712 |
80cbeb9ab7ad2d7f01f2a53273bf59a6 |
FormFast.ECM |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:38 +0000 UTC |
2023-06-20 18:28:38 +0000 UTC |
9db1f88469a23adaabce2f09c7b0acc618bb174f |
0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9 |
19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e3a49f661552f457a58a05aa08a8a2260163b0117aa88f690744d9864dad2c12 |
[68a62c2f20141caa2973b2a4, 68a62c4fe0cb7d1d0b6ef995, 68a62cb1297e2a61afff0f75, 68a62dbdd3f22bde37b5f4f1, 68a62dbdd3f22bde37b5f4fb, 68a62ea8e82920a204bd4bea] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Matrixcare.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:30Z, 2025-08-20T20:12:35Z, 2025-08-20T20:14:36Z, 2025-08-20T20:14:45Z, 2025-08-20T20:17:33Z, 2025-08-20T20:13:11Z] |
[63f2acff027a49b92b1c853563fa84da] |
[08845800b27ef97fe203342f1c40e9df2d78950b] |
[31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e] |
[7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Matrixcare.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Matrixcare |
13312 |
63f2acff027a49b92b1c853563fa84da |
FormFast.Matrixcare |
1.0.0.0 |
Not Signed |
2023-06-20 18:20:00 +0000 UTC |
2023-06-20 18:20:00 +0000 UTC |
08845800b27ef97fe203342f1c40e9df2d78950b |
31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e |
7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e0e00d85eb881678c720ba0a991f1e2e4d74681c5e7d1a432632434966f8a0cb |
[68a62c61512061b0a03001e5, 68a62d65c4509fd4abd51f61] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:11Z, 2025-08-20T20:17:32Z] |
[40ffc6345b95c232205c8536d42a1bd7] |
[1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a] |
[59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e] |
[11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.FFWFI |
218112 |
40ffc6345b95c232205c8536d42a1bd7 |
FormFast.FFWFI |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:40 +0000 UTC |
2023-06-20 18:28:40 +0000 UTC |
1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a |
59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e |
11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 010ddff1577bb17ad0560dc7f8db16f6acdbef67f14e95ee97a642af58604a10 |
[68a62c61512061b0a03001e9, 68a62d65c4509fd4abd51f65] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Imaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] |
[9309717e9d2577ab9a3c5c958927143f] |
[e49ddf7c7605fa186a8c8d501c9b31dd52bb359d] |
[0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf] |
[cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Imaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
Imaging |
22528 |
9309717e9d2577ab9a3c5c958927143f |
Imaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
e49ddf7c7605fa186a8c8d501c9b31dd52bb359d |
0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf |
cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f4d83af03fc9dccddc0e5ea6783f1579c486253abeb05bae6e46bf127a5f8457 |
[68a62c2f20141caa2973b29a, 68a62cb1297e2a61afff0f6a] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Oracle.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] |
[2dc49e26bee18b516bdd45649a5ae8a1] |
[42eea7c6a302295e9f6e8076b39b52804f214d4c] |
[4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1] |
[2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Oracle.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.Oracle |
7680 |
2dc49e26bee18b516bdd45649a5ae8a1 |
FormFast.Common.Oracle |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
42eea7c6a302295e9f6e8076b39b52804f214d4c |
4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1 |
2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 04df00b66b4fa24bdc2db48590ac7606033c016198f74519a57486f26bfbed4c |
[68a62c390de66b6bd84ed64e, 68a62cbbbad0c3891c05202f] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z] |
[23b2ae6780127e22e426af5b5389a6eb] |
[162a79b2993bee4878e2d1758b296e6a96e2a063] |
[33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88] |
[90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
|
289792 |
23b2ae6780127e22e426af5b5389a6eb |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:27:46 +0000 UTC |
2023-06-20 18:27:46 +0000 UTC |
162a79b2993bee4878e2d1758b296e6a96e2a063 |
33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88 |
90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 06248e206086e314f33123d3bdef9c88f986a21a8ecd43de4c41a8ec71d2a137 |
[68a62c390de66b6bd84ed651, 68a62cbbbad0c3891c052032] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.WPFImaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z] |
[dadb08e43df4a89ea6e4afee8da42293] |
[f561d513ca0284513c3310150988f26126b08be7] |
[6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1] |
[4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.WPFImaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Utility.WPFImaging |
23040 |
dadb08e43df4a89ea6e4afee8da42293 |
FormFast.Utility.WPFImaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
f561d513ca0284513c3310150988f26126b08be7 |
6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1 |
4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d81403211a57d215a6b4be8cc38f7e459dd7335c477f4ea9cd1ead0119b54df6 |
[68a62c2f20141caa2973b29b, 68a62cb1297e2a61afff0f6b] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Sfdc.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] |
[5c0bb4c741bcf8fcd6af3c01281eb540] |
[bfa43d44497992ad190244c7a450d53a2b240865] |
[68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2] |
[638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Sfdc.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.Sfdc |
44544 |
5c0bb4c741bcf8fcd6af3c01281eb540 |
FormFast.Common.Sfdc |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:58 +0000 UTC |
2023-06-20 18:27:58 +0000 UTC |
bfa43d44497992ad190244c7a450d53a2b240865 |
68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2 |
638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e004a9327c38e81644b9ec7c19a2129908a6c5d68edafb175962c2d78404dc1c |
[68a62c4d7785949c881367c5, 68a62d5b4fa1f463a5481ccf] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Base.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z] |
[af34b8b1165332b262d93e879c27365e] |
[901ce0ab1be72beb1bf8308f6bee7803a793f162] |
[5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2] |
[b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Base.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
Base |
200192 |
af34b8b1165332b262d93e879c27365e |
Base |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:38 +0000 UTC |
2023-06-20 18:28:38 +0000 UTC |
901ce0ab1be72beb1bf8308f6bee7803a793f162 |
5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2 |
b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09 |
2025-07-11 22:48:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d9f13dd98551054ff7b68b640d3af1a44941bcccb0f50d08f7434d874bd78915 |
[68a62c390de66b6bd84ed646, 68a62cb1297e2a61afff0f86] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WorkflowEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z] |
[1b9ee76338d61494a62f3d2481b92c95] |
[916303fec9d999bbad4fe203eb37a859fc08a83a] |
[6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501] |
[716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
WorkflowEngine.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
WorkflowEngine |
450560 |
1b9ee76338d61494a62f3d2481b92c95 |
WorkflowEngine |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:56 +0000 UTC |
2023-06-20 18:27:56 +0000 UTC |
916303fec9d999bbad4fe203eb37a859fc08a83a |
6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501 |
716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f |
2025-05-06 18:28:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d6b54e55d6c23433ecc098e1ce9f6f8d4c24ada9f4f3d6c316f54540694b4eb8 |
[68a62c57d96ab29dcabe19ad, 68a62d65c4509fd4abd51f5c] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Oracle.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] |
[39d6e5c350190a6ac95b0bec4525ceb3] |
[76fb72ff68e166b6ff1d319e13b2578aabc3fe52] |
[7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010] |
[9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Oracle.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common.Oracle |
7680 |
39d6e5c350190a6ac95b0bec4525ceb3 |
FormFast.Common.Oracle |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
76fb72ff68e166b6ff1d319e13b2578aabc3fe52 |
7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010 |
9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ce5c130e19f4771691161ab4b4329a24eab18e9df3229183c020204516c6e0a1 |
[68a62c2f20141caa2973b298, 68a62c4fe0cb7d1d0b6ef991, 68a62cb1297e2a61afff0f67, 68a62dbdd3f22bde37b5f4ed, 68a62dbdd3f22bde37b5f4f6, 68a62ea8e82920a204bd4be5] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.HL7.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:27Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] |
[3f08973ce2b2dc32f33a5b4163bab9c1] |
[b91d3a9974b84b00ac9ca8f0114db15a553ea00a] |
[32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed] |
[4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.HL7.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.HL7 |
120832 |
3f08973ce2b2dc32f33a5b4163bab9c1 |
FormFast.Common.HL7 |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
b91d3a9974b84b00ac9ca8f0114db15a553ea00a |
32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed |
4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c91f5897176c15efd03ff7ed6746b9479ffc0e88ebabd6bb95c9dd4884a0ff1a |
[68a62c4d7785949c881367c6, 68a62d5b4fa1f463a5481cd0] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Common.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z] |
[d5554406e72e2f7ede8c94c492229b65] |
[acf40e10c3844e9facc9689b8fcd1e68356c319f] |
[05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb] |
[1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Common.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common |
449024 |
d5554406e72e2f7ede8c94c492229b65 |
FormFast.Common |
4.3.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
acf40e10c3844e9facc9689b8fcd1e68356c319f |
05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb |
1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4 |
2025-07-11 22:49:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| da4d63e8b4184b115ac4613449ba37cbbf5c7008bc5e72a02f0e30409d164bfb |
[68a170048fde46e0c9f34fea, 68a17149e8e8e52d3dfcb9e4, 68a2c188e888059cd5cdb356, 68a2c3c48cc751a9359e6e31, 68a4131f300a88183c09330d, 68a41545c70c05af9b9a4906, 68a564afc34030bc5e574490, 68a5660d299bfb77304b4e2d] |
[2] |
[SYSTEM] |
[GRMC-ECW-APP, GRMC-ECW-IF] |
[NT AUTHORITY] |
[D:\eClinicalWorks\tomcat8\bin\tomcat_stop.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T06:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T06:00:01Z, 2025-08-20T06:00:01Z] |
[48a2fd9d7bcaeb0a981e418befc23462] |
[d86428726f1783a0e94f371bfef026a7ae6ce283] |
[20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec] |
[2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539] |
[192.168.3.239, 192.168.3.242] |
[192.168.3.239, 192.168.3.242] |
2 |
Success |
tomcat_stop.bat |
D:\eClinicalWorks\tomcat8\bin\ |
|
16 |
48a2fd9d7bcaeb0a981e418befc23462 |
|
|
Not Signed |
2021-07-04 18:02:01 +0000 UTC |
2021-07-04 18:02:01 +0000 UTC |
d86428726f1783a0e94f371bfef026a7ae6ce283 |
20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec |
2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539 |
2025-08-09 06:00:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c073d514ca716ea106959b1452f4a594d5cea50e1c9637a93ecfe5ca0458e384 |
[68a62c61512061b0a03001e4, 68a62d65c4509fd4abd51f60] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.WebFormImprint.Core.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z] |
[07794196e59ac753b490cc99593544fc] |
[bc4d2672634d3510fd3e45de23fcef6382d85f72] |
[4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2] |
[9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FastPrint.WebFormImprint.Core.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.FastPrint.WebFormImprint.Core |
18944 |
07794196e59ac753b490cc99593544fc |
FormFast.FastPrint.WebFormImprint.Core |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:40 +0000 UTC |
2023-06-20 18:28:40 +0000 UTC |
bc4d2672634d3510fd3e45de23fcef6382d85f72 |
4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2 |
9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bbf4e828f15edae7e0009db13f67000492433690ad2245c3837b991feb89979b |
[68a289dc0e6a21d30c5fa31e, 68a29c0c6ac1db84aa535408, 68a29c1bd1ae18ffaf5ca38c] |
[2] |
[SYSTEM] |
[U-NKRONOSWEB2, i-nkronoswork] |
[NT AUTHORITY] |
[C:\Kronos\openfire\ns\bin\ns_vars.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2248] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\Kronos\openfire\ns\bin\openfireService.exe] |
[2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z] |
[8c8134e0f58626802c6448a24065cd29] |
[5568e8662a3001bdea1e8e7f7ab93cd0a49ece48] |
[0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db] |
[ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede] |
[172.25.16.7, 172.17.253.221] |
[172.25.16.7, 172.17.253.221] |
2 |
Success |
ns_vars.bat |
C:\Kronos\openfire\ns\bin\ |
|
621 |
8c8134e0f58626802c6448a24065cd29 |
|
|
Not Signed |
2022-02-08 15:15:46 +0000 UTC |
2022-02-08 15:16:06 +0000 UTC |
5568e8662a3001bdea1e8e7f7ab93cd0a49ece48 |
0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db |
ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede |
2025-08-09 02:00:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bc6276343bf45f469e33be988e0016326417e07d89f1d0ef20f90f18bb171119 |
[68a62c390de66b6bd84ed636, 68a62cb1297e2a61afff0f78] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.WPFImaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] |
[8106ee1d0eca9bb361f0420e501667ac] |
[a6030b69ab1c721f47a9d05125a374521a644475] |
[2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0] |
[baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.WPFImaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Utility.WPFImaging |
23040 |
8106ee1d0eca9bb361f0420e501667ac |
FormFast.Utility.WPFImaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
a6030b69ab1c721f47a9d05125a374521a644475 |
2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0 |
baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ddf671505404788521fda5c973af69107bc087d852d71c4b7c32aa3e196dfe48 |
[68a62c390de66b6bd84ed64d, 68a62cbbbad0c3891c05202e] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z] |
[7c34e63ebc70dc9dc37dfca6d43e98cf] |
[ae7c13b1bba6b8ea57c53b0163dca8140cd2110a] |
[d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb] |
[27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.FFWFI |
218112 |
7c34e63ebc70dc9dc37dfca6d43e98cf |
FormFast.FFWFI |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:44 +0000 UTC |
2023-06-20 18:27:44 +0000 UTC |
ae7c13b1bba6b8ea57c53b0163dca8140cd2110a |
d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb |
27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| eca61854f8025db6e42a44a39206869612d62eb8f71f3e479fd019118a700859 |
[68a62c2f20141caa2973b296, 68a62cb1297e2a61afff0f64] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:26Z, 2025-08-20T20:14:33Z] |
[5a10414070f606d7d4713d640f2d06f2] |
[a7d305197c8b3c311aa1b36e67c3332e132f267d] |
[f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b] |
[b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.ECM |
499712 |
5a10414070f606d7d4713d640f2d06f2 |
FormFast.ECM |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:54 +0000 UTC |
2023-06-20 18:27:54 +0000 UTC |
a7d305197c8b3c311aa1b36e67c3332e132f267d |
f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b |
b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ace6da9bf8d445dc8ee37e2c53ba887f4240eac639c26f1f636181978105dce7 |
[68a2933c9ec71f04ddbda157, 68a293873b7ed38a0e67d317] |
[2] |
[SYSTEM] |
[U-NKRONOSWEB2, i-nkronoswork] |
[NT AUTHORITY] |
[C:\Kronos\jboss\bin\jboss-cli.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-18T02:40:09Z, 2025-08-18T02:40:10Z] |
[1f936af4f88c0e516f5e9bdc04702262] |
[4e085411a943887521afa6b3478c4765c53ee977] |
[75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4] |
[a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4] |
[172.25.16.7, 172.17.253.221] |
[172.25.16.7, 172.17.253.221] |
2 |
Success |
jboss-cli.bat |
E:\kronos\jboss\bin\ |
|
2879 |
1f936af4f88c0e516f5e9bdc04702262 |
|
|
Not Signed |
2020-12-16 21:22:13 +0000 UTC |
2017-12-17 03:33:40 +0000 UTC |
4e085411a943887521afa6b3478c4765c53ee977 |
75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4 |
a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4 |
2025-07-22 23:34:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b09d4426042b1b0b92920640077a0cb0437448dbd4e2ad6362a5db8c19a48396 |
[68a62c390de66b6bd84ed63f, 68a62cb1297e2a61afff0f81] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\PDFEditor.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z] |
[0a479cfa691848f8093f23dee318a0f8] |
[2452e732580e910c62edc42cb7e7f5664b7af275] |
[304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54] |
[1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
PDFEditor.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
PDFEditor |
109568 |
0a479cfa691848f8093f23dee318a0f8 |
PDFEditor |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
2452e732580e910c62edc42cb7e7f5664b7af275 |
304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54 |
1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| af94476044666c91a75deaaad5adf85364fab6e767c1ea41617a86554b4cc15a |
[68a62c254d354bf933e4d34f, 68a62ca798fdd4aa74a31738] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Base.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:17Z, 2025-08-20T20:14:24Z] |
[c50b3e7c14d2f045bab6117722fee54a] |
[efc6caa5b6bbfe187aee2f22d76872cc63922546] |
[539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286] |
[b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Base.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
Base |
200192 |
c50b3e7c14d2f045bab6117722fee54a |
Base |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:52 +0000 UTC |
2023-06-20 18:27:52 +0000 UTC |
efc6caa5b6bbfe187aee2f22d76872cc63922546 |
539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286 |
b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e |
2025-05-06 18:27:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b40599107c267ccb76709238ef7f34abe28628eeeb22e17c12786b0c7d3477c0 |
[68a62c57d96ab29dcabe19af, 68a62d65c4509fd4abd51f5e] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.WebControls.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] |
[6a642a74192c2a589bdae7882625b4a3] |
[0fd309336186c6eca3035fc53fe67640e0ff7dc2] |
[0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712] |
[894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.WebControls.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common.WebControls |
819712 |
6a642a74192c2a589bdae7882625b4a3 |
FormFast.Common.WebControls |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
0fd309336186c6eca3035fc53fe67640e0ff7dc2 |
0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712 |
894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a469e94319ca4a5068eba7c584bb648cef964b39247eafbf36274c2739b53bf8 |
[68a62c57d96ab29dcabe19aa, 68a62d5b4fa1f463a5481cd2] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Dashboard.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] |
[40c09d5c6e3c3ee86e34db4babde939a] |
[4fdf90e25d0025f59348b401f06b743be653f3cb] |
[c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b] |
[0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Dashboard.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common.Dashboard |
34304 |
40c09d5c6e3c3ee86e34db4babde939a |
FormFast.Common.Dashboard |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:38 +0000 UTC |
2023-06-20 18:28:38 +0000 UTC |
4fdf90e25d0025f59348b401f06b743be653f3cb |
c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b |
0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ad1da4f93aab239ace410b322f5ed5cfe1f5879da4d19e7ca297e24305382450 |
[68a62c390de66b6bd84ed644, 68a62cbbbad0c3891c052027] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z] |
[c1b3cbbd457177190f1876cae07fcbbe] |
[96715a446043a6f266410e8131710ac45574e701] |
[23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf] |
[11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
|
631296 |
c1b3cbbd457177190f1876cae07fcbbe |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:27:44 +0000 UTC |
2023-06-20 18:27:44 +0000 UTC |
96715a446043a6f266410e8131710ac45574e701 |
23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf |
11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a9c2e0aac424785820d2e99836bdc15a30fd6116221f24a538988654f8e50f2a |
[68a62c2f20141caa2973b29f, 68a62cb1297e2a61afff0f70] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebControls.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:14:35Z] |
[3a5259b82d4d5545ff8ce39e8340ee51] |
[ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7] |
[f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771] |
[fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.WebControls.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.WebControls |
819712 |
3a5259b82d4d5545ff8ce39e8340ee51 |
FormFast.Common.WebControls |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:52 +0000 UTC |
2023-06-20 18:27:52 +0000 UTC |
ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7 |
f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771 |
fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a7e24a20b68c9fcce3cd15293e17c137fc6b4dd216ed7a769aee2ba388b36662 |
[68a62c2f20141caa2973b29d, 68a62c4fe0cb7d1d0b6ef994, 68a62cb1297e2a61afff0f6d, 68a62dbdd3f22bde37b5f4f0, 68a62dbdd3f22bde37b5f4f9, 68a62ea8e82920a204bd4be8] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] |
[a8d6363363dc6e25c38bae4ed0a8bdf0] |
[468c211b8cea0c4282358993a6f84072ca3d46d4] |
[4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a] |
[ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.SharePoint.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
|
20992 |
a8d6363363dc6e25c38bae4ed0a8bdf0 |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:19:58 +0000 UTC |
2023-06-20 18:19:58 +0000 UTC |
468c211b8cea0c4282358993a6f84072ca3d46d4 |
4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a |
ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9b8eeb58ae7a747a0afb91393f6aa4da945d3909322a45d047001eac42ccfe0b |
[68a62c390de66b6bd84ed643, 68a62cbbbad0c3891c052026] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z] |
[3263475c89ab7ec1df01983fb99cc8ad] |
[5348eb8c358aa68c767096de74065ae4e64221ab] |
[a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2] |
[4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.ECM |
499712 |
3263475c89ab7ec1df01983fb99cc8ad |
FormFast.ECM |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:42 +0000 UTC |
2023-06-20 18:27:42 +0000 UTC |
5348eb8c358aa68c767096de74065ae4e64221ab |
a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2 |
4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8da0a73d9bfc04ac9994386d8e5abaeb6e79fadf60f8a1be36557bc03c2a3dbd |
[68a62c390de66b6bd84ed647, 68a62cbbbad0c3891c052028] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Oracle.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z] |
[1e7d19b84f70194728281751f39aab86] |
[815de6c698bc8f7a4a54fe69256d4cbb98b39295] |
[0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16] |
[bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Oracle.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Common.Oracle |
7680 |
1e7d19b84f70194728281751f39aab86 |
FormFast.Common.Oracle |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
815de6c698bc8f7a4a54fe69256d4cbb98b39295 |
0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16 |
bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8f17acea63db67d665c4b9619cfd2176782e029c7bf9fd81ddf8743066878009 |
[68a62c61512061b0a03001e8, 68a62d65c4509fd4abd51f64] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.WPFImaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] |
[2af245a0a0a6739073b1c35f9c086273] |
[f27e97961d0910317696386cff2cd3af5756f953] |
[c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5] |
[24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.WPFImaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Utility.WPFImaging |
23040 |
2af245a0a0a6739073b1c35f9c086273 |
FormFast.Utility.WPFImaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
f27e97961d0910317696386cff2cd3af5756f953 |
c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5 |
24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9024b6f1218d19b2a6595dc3b8dc69cacd733a0c47f2a1007e7b02ca98351e8b |
[68a62c254d354bf933e4d351, 68a62ca798fdd4aa74a3173a] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Common.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:18Z, 2025-08-20T20:14:25Z] |
[234e5d848debfd7b2b962ddc610b9d62] |
[8bce91910db4e551f1aa9dc7e83d61440b721a6b] |
[14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96] |
[d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Common.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common |
449024 |
234e5d848debfd7b2b962ddc610b9d62 |
FormFast.Common |
4.3.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
8bce91910db4e551f1aa9dc7e83d61440b721a6b |
14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96 |
d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766 |
2025-05-06 18:27:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a1238aeac72ed3f322173557f5170fad5f79de5799f743c96a1e8b87fde11473 |
[68a62c2f20141caa2973b2a1, 68a62cb1297e2a61afff0f72] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.WebFormImprint.Core.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] |
[3135e62c687f74b43f94c66b49445cb7] |
[e38bf716c7802960ad937b1551580b2f1f788ea6] |
[eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24] |
[204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FastPrint.WebFormImprint.Core.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.FastPrint.WebFormImprint.Core |
18944 |
3135e62c687f74b43f94c66b49445cb7 |
FormFast.FastPrint.WebFormImprint.Core |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:56 +0000 UTC |
2023-06-20 18:27:56 +0000 UTC |
e38bf716c7802960ad937b1551580b2f1f788ea6 |
eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24 |
204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a4259a8145dbe0502a700f2a97d2e5a52f0056025d172e71add9d97fb0c2d443 |
[68a62c390de66b6bd84ed655, 68a62cbbbad0c3891c052036] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\WorkflowEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:38Z, 2025-08-20T20:14:47Z] |
[5a89d1ae29d44aafd5e0a06cb65f5568] |
[139d9e403eb754b10b9952f92710977087d60141] |
[be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a] |
[d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
WorkflowEngine.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
WorkflowEngine |
450560 |
5a89d1ae29d44aafd5e0a06cb65f5568 |
WorkflowEngine |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:46 +0000 UTC |
2023-06-20 18:27:46 +0000 UTC |
139d9e403eb754b10b9952f92710977087d60141 |
be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a |
d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3 |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0e6bd78b294419e4fdf53637463eddfa92e91aebcb08308aab0d1825c8abb76b |
[68a62dbdd3f22bde37b5f4fa, 68a62ea8e82920a204bd4be9] |
[2] |
[SYSTEM] |
[i-NFP1, u-NFP2] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.PrintEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:17:32Z, 2025-08-20T20:13:10Z] |
[54d640613f50c4c6d4dfac35bcd2e3dc] |
[57a19917f194791d4039d9254d6f0cbda27b7b16] |
[dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1] |
[0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a] |
[172.17.253.162, 172.25.17.195] |
[172.17.253.162, 172.25.17.195] |
2 |
Success |
FormFast.FastPrint.PrintEngine.dll |
C:\Program Files (x86)\FormFast\PrintManagerClient\ |
FormFast.FastPrint.PrintEngine |
252416 |
54d640613f50c4c6d4dfac35bcd2e3dc |
FastPrint |
5.0.8571.24000 |
Not Signed |
2023-06-20 17:20:02 +0000 UTC |
2023-06-20 17:20:02 +0000 UTC |
57a19917f194791d4039d9254d6f0cbda27b7b16 |
dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1 |
0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a |
2025-05-01 17:27:15 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 098d2b84069e297d67d62296d293f624529fcbfb81d2f483841cffaaf856ee85 |
[68a17e784c66390ad0dbbcc0, 68a17f4292a8fa5a3dd2d46f, 68a2cffe3648098ea02a6aec, 68a2d0c6e967c9fedcd45bc3, 68a4226ce3b71f72263710e5, 68a42295ccb2668fe949e62f, 68a5734d56974fb8ac6f8dea, 68a574064a957a7c650fc381] |
[2] |
[SYSTEM] |
[i-vpg1a, u-vpg1b] |
[NT AUTHORITY] |
[C:\icm\bin\OPCCleanup.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T06:57:01Z, 2025-08-17T06:57:00Z, 2025-08-18T06:57:01Z, 2025-08-18T06:57:00Z, 2025-08-19T06:57:00Z, 2025-08-19T06:57:01Z, 2025-08-20T06:57:00Z] |
[70a3df06b9af27c0169a5f2e57fe0910] |
[3fb2825a5131ce29da291a67d1bdda2e095d4bf5] |
[345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a] |
[27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf] |
[172.17.196.43, 172.25.196.36] |
[172.17.196.43, 172.25.196.36] |
2 |
Success |
OPCCleanup.bat |
C:\icm\bin\ |
|
309 |
70a3df06b9af27c0169a5f2e57fe0910 |
|
|
Not Signed |
2019-12-19 12:48:26 +0000 UTC |
2021-08-18 16:13:21 +0000 UTC |
3fb2825a5131ce29da291a67d1bdda2e095d4bf5 |
345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a |
27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf |
2025-08-09 06:57:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7558691333b70391fb91d26b9260507de1e56c472fcc9e2c404ce60cda87ebc5 |
[68a62c390de66b6bd84ed648, 68a62cbbbad0c3891c052029] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Sfdc.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z] |
[b0f7ae9b56111a45892fb5d4876413a7] |
[499944bef9b82dfef97ae702d7d6618b9f2ffe97] |
[ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6] |
[995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Sfdc.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Common.Sfdc |
44544 |
b0f7ae9b56111a45892fb5d4876413a7 |
FormFast.Common.Sfdc |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:46 +0000 UTC |
2023-06-20 18:27:46 +0000 UTC |
499944bef9b82dfef97ae702d7d6618b9f2ffe97 |
ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6 |
995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 77fe0f26dccc5c24f74c01715f8ee961dcbf89d097ba3e6d98a8affeea40f8c6 |
[68a62c2f20141caa2973b2a3, 68a62cb1297e2a61afff0f74] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:29Z, 2025-08-20T20:14:36Z] |
[c8d59a3d0d900b0a8897e19beb7aa313] |
[6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a] |
[be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119] |
[d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
|
289792 |
c8d59a3d0d900b0a8897e19beb7aa313 |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:27:56 +0000 UTC |
2023-06-20 18:27:56 +0000 UTC |
6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a |
be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119 |
d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7905b1830cbf4890381a3415372e109eeb1ece7c02936a220ac1f166e74b0ed8 |
[68a2933c9ec71f04ddbda158, 68a293873b7ed38a0e67d318] |
[2] |
[SYSTEM] |
[U-NKRONOSWEB2, i-nkronoswork] |
[NT AUTHORITY] |
[C:\Kronos\jboss\bin\standalone.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Kronos\wfc\bin\jbossService.exe] |
[2025-08-18T02:41:45Z, 2025-08-18T02:41:33Z] |
[48b73b080adb3ce41b4947d5775eb4bc] |
[e1ffc19ea0e7993d37c3119a49c1c0c068624284] |
[155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401] |
[7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a] |
[172.25.16.7, 172.17.253.221] |
[172.25.16.7, 172.17.253.221] |
2 |
Success |
standalone.bat |
E:\Kronos\jboss\bin\ |
|
9260 |
48b73b080adb3ce41b4947d5775eb4bc |
|
|
Not Signed |
2020-12-12 23:23:31 +0000 UTC |
2017-12-17 03:33:40 +0000 UTC |
e1ffc19ea0e7993d37c3119a49c1c0c068624284 |
155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401 |
7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a |
2025-07-22 23:35:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7495b8a6f9abb329896bc4b33c9995705069703ff2930e80f09e449a87c57517 |
[68a62c2f20141caa2973b299, 68a62c4fe0cb7d1d0b6ef992, 68a62cb1297e2a61afff0f69, 68a62dbdd3f22bde37b5f4ee, 68a62dbdd3f22bde37b5f4f7, 68a62ea8e82920a204bd4be6] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Models.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] |
[57df9c39430df2249924c520a3bd5795] |
[0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec] |
[5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367] |
[39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Models.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.Models |
15360 |
57df9c39430df2249924c520a3bd5795 |
FormFast.Common.Models |
1.0.0.0 |
Not Signed |
2023-06-20 18:19:58 +0000 UTC |
2023-06-20 18:19:58 +0000 UTC |
0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec |
5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367 |
39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 68e27e7a76de394402eb3d25ba0772f4b0192293f4d969fedfb793697583a122 |
[68a62c390de66b6bd84ed650, 68a62cbbbad0c3891c052031] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.ImageProcessor.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z] |
[40e9672f5104713cd10b2d229a4711f4] |
[102515d3b0a510b9a18bb4752d73022ec2b0b398] |
[7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95] |
[7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.ImageProcessor.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Utility.ImageProcessor |
11776 |
40e9672f5104713cd10b2d229a4711f4 |
FormFast.Utility.ImageProcessor |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:46 +0000 UTC |
2023-06-20 18:27:46 +0000 UTC |
102515d3b0a510b9a18bb4752d73022ec2b0b398 |
7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95 |
7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6a709cd50fa7d3826662bfd0b27b1b9f80f3a2a57092655c17e33238cc13e764 |
[68a178f000fcf6f09fa43ed5, 68a17d32b8e0917a96ab5184, 68a2ca7bf1b5d070157fa50b, 68a2cebeea2bec6dd453ddc7, 68a41c1ee32af9c7fb4f586e, 68a4205b652c2f8e7aac8984, 68a56dbbc331ff607b884d4c, 68a571f415ffa42bc82736b6] |
[2] |
[WVUHPAN] |
[I-PANHS, U-PanHS] |
[HS] |
[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-17T06:30:02Z, 2025-08-17T06:51:02Z, 2025-08-18T06:30:02Z, 2025-08-18T06:51:03Z, 2025-08-19T06:30:03Z, 2025-08-19T06:51:02Z, 2025-08-20T06:30:03Z, 2025-08-20T06:51:02Z] |
[93fa6789028ba05bc8aacc943b54eddd] |
[f17fa2522392628272a587caf103c1fd0c7732f8] |
[e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea] |
[609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c] |
[172.17.252.76, 172.25.18.242] |
[172.17.252.76, 172.25.18.242] |
2 |
Success |
no-ie.ps1 |
C:\Program Files\Quest Software\Management Shell for AD\ |
|
1831 |
93fa6789028ba05bc8aacc943b54eddd |
|
|
Not Signed |
2018-11-06 12:14:18 +0000 UTC |
2020-04-17 12:37:22 +0000 UTC |
f17fa2522392628272a587caf103c1fd0c7732f8 |
e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea |
609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c |
2025-08-09 06:30:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6b6ad431214d0c4ef21f0b10cd6acde62b800a16dc3ed22310b742d149523e71 |
[68a62c390de66b6bd84ed64a, 68a62cbbbad0c3891c05202b] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common_Rest.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] |
[c604a070e63e2e6585164307edf7dbf2] |
[45233bb7eb48124f6c3606b6a13925954b985b33] |
[2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1] |
[b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common_Rest.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Common_Rest |
86016 |
c604a070e63e2e6585164307edf7dbf2 |
FormFast.Common_Rest |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:46 +0000 UTC |
2023-06-20 18:27:46 +0000 UTC |
45233bb7eb48124f6c3606b6a13925954b985b33 |
2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1 |
b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 618e4a759878701f6e2fa437073f84a4928b28e2f5ad2cdd177d582b9a4d7809 |
[68a62c390de66b6bd84ed649, 68a62cbbbad0c3891c05202a] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.WebControls.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] |
[cd453ae2d81abb01c3672138e3c684b9] |
[fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7] |
[7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8] |
[3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.WebControls.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Common.WebControls |
819712 |
cd453ae2d81abb01c3672138e3c684b9 |
FormFast.Common.WebControls |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7 |
7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8 |
3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8aa6f2c4876469b14c284845015127a526963e464fc909961c4d57eb565a978b |
[68a62c2f20141caa2973b2a5, 68a62cb1297e2a61afff0f76] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Services.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] |
[27e1dbc8bc6cca4fc36c2012705294a2] |
[6514a2bbf32e5e805a3355ad21d367a98bdb6a49] |
[88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac] |
[9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Services.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Services |
47104 |
27e1dbc8bc6cca4fc36c2012705294a2 |
FormFast.Services |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:58 +0000 UTC |
2023-06-20 18:27:58 +0000 UTC |
6514a2bbf32e5e805a3355ad21d367a98bdb6a49 |
88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac |
9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 85cedd9e1d502085b0bfef0698aef44d947faa8e389593cd33626a696d6f748c |
[68a62c390de66b6bd84ed652, 68a62cbbbad0c3891c052033] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Imaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z] |
[42fa62608696fa72558ae86415e6f201] |
[30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9] |
[21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29] |
[d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Imaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
Imaging |
22528 |
42fa62608696fa72558ae86415e6f201 |
Imaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9 |
21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29 |
d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4 |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 87379fa2a359ec5d48330bd8b11792b871c516654cb9531bf55cf9d7f986d24d |
[68a62c390de66b6bd84ed64c, 68a62cbbbad0c3891c05202d] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.WebFormImprint.Core.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z] |
[7d73e6851a1c8517ee4350a6202f6543] |
[25be8b71b22fcc8f23dabda16a5ef5a483554aed] |
[7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3] |
[8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FastPrint.WebFormImprint.Core.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.FastPrint.WebFormImprint.Core |
18944 |
7d73e6851a1c8517ee4350a6202f6543 |
FormFast.FastPrint.WebFormImprint.Core |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:44 +0000 UTC |
2023-06-20 18:27:44 +0000 UTC |
25be8b71b22fcc8f23dabda16a5ef5a483554aed |
7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3 |
8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6054d028e63b2ba38b02379beaebdd1bbf8ee123f706a9c36caeb6a2de43b333 |
[68a62c390de66b6bd84ed64b, 68a62cbbbad0c3891c05202c] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.PrintEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] |
[8b3adcbf2a0f7a606fce9c03b8c9732a] |
[b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8] |
[f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff] |
[1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FastPrint.PrintEngine.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.FastPrint.PrintEngine |
252416 |
8b3adcbf2a0f7a606fce9c03b8c9732a |
FastPrint |
5.0.8571.24231 |
Not Signed |
2023-06-20 18:27:44 +0000 UTC |
2023-06-20 18:27:44 +0000 UTC |
b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8 |
f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff |
1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5ff0922ec426c97cdafae576ce456d5db7ca1113c50c94aba499afeff0a52daa |
[68a162ca5b8354c34e8aa922, 68a172395f4b12ae90c10d00, 68a2b4553b82e453c561f8da, 68a2c2ce81a308ec5f3f61a6, 68a40605126890019f479267, 68a41470bba721704ee37de4, 68a557a64e41d80738b8079c, 68a5660d5c30e7a0a3efd4cf] |
[2] |
[ldapuser] |
[I-PANWVUHS, U-PanWVUHS] |
[WVUHS] |
[C:\Scripts\NoIE.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:01Z, 2025-08-17T06:00:01Z, 2025-08-18T05:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T05:00:02Z, 2025-08-19T06:00:02Z, 2025-08-20T05:00:01Z, 2025-08-20T06:00:02Z] |
[1777d70e7e9b66f797bc70bad2f58a4e] |
[29e5acaff6e761a8bb35434d5be41b4655ffd81c] |
[96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a] |
[f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255] |
[172.17.252.77, 172.25.18.244] |
[172.17.252.77, 172.25.18.244] |
2 |
Success |
NoIE.bat |
C:\Scripts\ |
|
186 |
1777d70e7e9b66f797bc70bad2f58a4e |
|
|
Not Signed |
2018-10-18 01:52:16 +0000 UTC |
2015-10-08 19:24:30 +0000 UTC |
29e5acaff6e761a8bb35434d5be41b4655ffd81c |
96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a |
f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255 |
2025-08-09 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5f68908d42bc24d1f7a4917064be3dfed6ec4b072ab253e556a448d413428e66 |
[68a62c2f20141caa2973b29c, 68a62c4fe0cb7d1d0b6ef993, 68a62cb1297e2a61afff0f6c, 68a62dbdd3f22bde37b5f4ef, 68a62dbdd3f22bde37b5f4f8, 68a62ea8e82920a204bd4be7] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] |
[c3e5479f47487756de025353487272a1] |
[acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e] |
[7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a] |
[8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.SharePoint.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.SharePoint |
16384 |
c3e5479f47487756de025353487272a1 |
FormFast.Common.SharePoint |
1.0.0.0 |
Not Signed |
2023-06-20 18:19:58 +0000 UTC |
2023-06-20 18:19:58 +0000 UTC |
acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e |
7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a |
8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0e28827fcc1512a275ce68b1fb018b2ce93612d87ec4abe10ff1fec81f926c3f |
[68a289dc0e6a21d30c5fa320, 68a29c0c6ac1db84aa535407, 68a29c1bd1ae18ffaf5ca38b] |
[2] |
[SYSTEM] |
[U-NKRONOSWEB2, i-nkronoswork] |
[NT AUTHORITY] |
[C:\Kronos\openfire\ns\bin\openfire.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2248] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\Kronos\openfire\ns\bin\openfireService.exe] |
[2025-08-18T02:00:01Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z] |
[ab64c8787040b08d683005966e018ee4] |
[f9da413179bee525e399f586c1afe270a2de061b] |
[6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd] |
[8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9] |
[172.25.16.7, 172.17.253.221] |
[172.25.16.7, 172.17.253.221] |
2 |
Success |
openfire.bat |
C:\Kronos\openfire\ns\bin\ |
|
1163 |
ab64c8787040b08d683005966e018ee4 |
|
|
Not Signed |
2022-02-08 15:15:46 +0000 UTC |
2021-12-20 08:03:28 +0000 UTC |
f9da413179bee525e399f586c1afe270a2de061b |
6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd |
8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9 |
2025-08-09 02:00:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 490a7505dee3e81999a414fcce3d198b21bbd62ff60d35dfdf1d6618552fb20e |
[68a62c61512061b0a03001e6, 68a62d65c4509fd4abd51f62] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] |
[d1da2ba18a45195587ac85e4c452ca09] |
[15b8ff50b85e3c93821ace49b827d283d81b0d51] |
[bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77] |
[3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
|
289792 |
d1da2ba18a45195587ac85e4c452ca09 |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:28:42 +0000 UTC |
2023-06-20 18:28:42 +0000 UTC |
15b8ff50b85e3c93821ace49b827d283d81b0d51 |
bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77 |
3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 458ea525c7c23be64712ffb0c5e92f2f76912d0b22c9a3ce8abcbc4b798154c6 |
[68a62c2f20141caa2973b2a2, 68a62cb1297e2a61afff0f73] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] |
[4585c873644131690c95ff47f4e97a26] |
[2f6fc084641cf96435b0521abab90b4be05e9954] |
[52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f] |
[9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FFWFI.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.FFWFI |
218112 |
4585c873644131690c95ff47f4e97a26 |
FormFast.FFWFI |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:56 +0000 UTC |
2023-06-20 18:27:56 +0000 UTC |
2f6fc084641cf96435b0521abab90b4be05e9954 |
52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f |
9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5aa21712477223afaa29abd43e991240704025ec113d55483a1b6b9332a4bc29 |
[68a62c2f20141caa2973b29e, 68a62cb1297e2a61afff0f6f] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebApis.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] |
[f3e2b470701f45a53147e0a6d0da5b28] |
[097e220f5d49b3be195408c35eaff96c131ea7db] |
[33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8] |
[a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.WebApis.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Common.WebApis |
101376 |
f3e2b470701f45a53147e0a6d0da5b28 |
FormFast.Common.WebApis |
1.0.0.0 |
Not Signed |
2023-06-20 18:25:14 +0000 UTC |
2023-06-20 18:25:14 +0000 UTC |
097e220f5d49b3be195408c35eaff96c131ea7db |
33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8 |
a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 476a8c77b72ac987cf971d96f3cd4d06a1097b69c15b00dd8558bd0eb0d291b8 |
[68a62c57d96ab29dcabe19a9, 68a62d5b4fa1f463a5481cd1] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FFAdminPanel.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:07Z, 2025-08-20T20:17:29Z] |
[7e3986d0b83be86c9bd73da60ac9c757] |
[a9d2fb1648bf369ac3c49b19cfe88229428bf05a] |
[02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45] |
[600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FFAdminPanel.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
ffAdminPanel |
642048 |
7e3986d0b83be86c9bd73da60ac9c757 |
ffAdminPanel |
1.0.0.0 |
Not Signed |
2023-06-20 18:25:16 +0000 UTC |
2023-06-20 18:25:16 +0000 UTC |
a9d2fb1648bf369ac3c49b19cfe88229428bf05a |
02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45 |
600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 47c150187166b4399b815710fdd231c7060bfb92b005876b25f730e7facfbe53 |
[68a62c2f20141caa2973b294, 68a62cb1297e2a61afff0f68] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:23Z, 2025-08-20T20:14:34Z] |
[5d8c166bc8f04a2e850cf9de89166d2c] |
[11da266542a9b64f4e75f6edda8287f6efbf56f9] |
[03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7] |
[f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Common.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Common |
449024 |
5d8c166bc8f04a2e850cf9de89166d2c |
FormFast.Common |
4.3.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
11da266542a9b64f4e75f6edda8287f6efbf56f9 |
03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7 |
f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd |
2025-05-06 18:29:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 451e993a076564310629300dceda6e38d0749f6cf590a9e49882d033deca879b |
[68a62c2f20141caa2973b2a0, 68a62cb1297e2a61afff0f71] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.PrintEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] |
[83d1c497cddbb8bd7c89d0f58850d8cb] |
[ab2968ee9868bbc6603b705c27963003a68b942e] |
[414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b] |
[e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.FastPrint.PrintEngine.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.FastPrint.PrintEngine |
252416 |
83d1c497cddbb8bd7c89d0f58850d8cb |
FastPrint |
5.0.8571.24236 |
Not Signed |
2023-06-20 18:27:54 +0000 UTC |
2023-06-20 18:27:54 +0000 UTC |
ab2968ee9868bbc6603b705c27963003a68b942e |
414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b |
e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 43fb47284a0923c6f526905acaf6ed471ce98dc12e90ead9b1f6caaafd07a6c9 |
[68a1630bf6e8920a96bd8fb7, 68a164cdde38c806f081815d, 68a2b48ff48ce007dac7acfe, 68a2b651d3e43b5dd374f130, 68a40646d9f12aef1f9954e1, 68a4082197086979fc9ed946, 68a557f1b2b6b5c32c84a884, 68a559cc6ef9d803fa606146] |
[2] |
[SYSTEM] |
[U-VAWHDSB, I-VAWHDSA] |
[NT AUTHORITY] |
[C:\icm\pcce\aw\bin\purgedist.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z] |
[3cbc298ab5d529bf52f94797407148d9] |
[2d26db4453bb3314c5785876f9b54fd8c21f74cb] |
[ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774] |
[ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71] |
[172.25.196.40, 172.17.196.47] |
[172.25.196.40, 172.17.196.47] |
2 |
Success |
purgedist.bat |
C:\icm\pcce\aw\bin\ |
|
408 |
3cbc298ab5d529bf52f94797407148d9 |
|
|
Not Signed |
2021-10-07 20:04:52 +0000 UTC |
2021-10-07 20:04:52 +0000 UTC |
2d26db4453bb3314c5785876f9b54fd8c21f74cb |
ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774 |
ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 435e925a046549dc8d69886dc9a6e2cb57abf5910eb50d36d783fd3dd804196e |
[68a62c390de66b6bd84ed654, 68a62cbbbad0c3891c052035] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\PDFEditor.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:37Z, 2025-08-20T20:14:47Z] |
[85f88b003ea039bdaf0d0a20b7ec8baa] |
[09a37d44fc1c5879d9fa372a1c8f83720273e0da] |
[3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49] |
[70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
PDFEditor.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
PDFEditor |
109568 |
85f88b003ea039bdaf0d0a20b7ec8baa |
PDFEditor |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:40 +0000 UTC |
2023-06-20 18:27:40 +0000 UTC |
09a37d44fc1c5879d9fa372a1c8f83720273e0da |
3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49 |
70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4398f7df96dfec614731513fdb359fd1a7d2716a23b6375bcdc770db8d4dda79 |
[68a62c390de66b6bd84ed637, 68a62cb1297e2a61afff0f79] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Imaging.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:30Z, 2025-08-20T20:14:37Z] |
[46c2b221fd3e580477fb246dd2281781] |
[1b657b8af04151127213b220c217ebcec01ebf45] |
[28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b] |
[cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Imaging.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
Imaging |
22528 |
46c2b221fd3e580477fb246dd2281781 |
Imaging |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
1b657b8af04151127213b220c217ebcec01ebf45 |
28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b |
cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4608826d15c9b0013ef43372373ac5c1c3d4a93c7b39658115e0f6568bfcf9ad |
[68a62c2f20141caa2973b297, 68a62cb1297e2a61afff0f66] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:27Z, 2025-08-20T20:14:33Z] |
[b1a9f00e7f16af894f7d762f31f04103] |
[aea24bcf206640f8e3fe8d855ee4a105dea5a326] |
[6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474] |
[f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
|
631296 |
b1a9f00e7f16af894f7d762f31f04103 |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:27:54 +0000 UTC |
2023-06-20 18:27:54 +0000 UTC |
aea24bcf206640f8e3fe8d855ee4a105dea5a326 |
6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474 |
f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 48c00f0cf8e81b7136ae6aad795978d4d6bbe8959aa93c8c88002439b65c35e0 |
[68a62c2f20141caa2973b295, 68a62cb1297e2a61afff0f6e] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common_WebService.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:24Z, 2025-08-20T20:14:34Z] |
[6cc80ab6d1e337607c99b7836f897b7a] |
[b7769363d5ece7b0a8d827223972357eabf93698] |
[ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19] |
[cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Common_WebService.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
Common_WebService |
116224 |
6cc80ab6d1e337607c99b7836f897b7a |
Common_WebService |
1.0.0.0 |
Not Signed |
2023-06-20 18:25:20 +0000 UTC |
2023-06-20 18:25:20 +0000 UTC |
b7769363d5ece7b0a8d827223972357eabf93698 |
ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19 |
cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0 |
2025-05-06 18:29:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3c18a9fccb3204a7c75bfcb401aefbe3887d079ae5e77d862c1a71f1c7ccddad |
[68a1630bf6e8920a96bd8fb8, 68a164cdde38c806f081815e, 68a2b48ff48ce007dac7acfd, 68a2b651d3e43b5dd374f131, 68a40646d9f12aef1f9954e2, 68a4082197086979fc9ed945, 68a557f1b2b6b5c32c84a885, 68a559cc6ef9d803fa606147] |
[2] |
[SYSTEM] |
[U-VAWHDSB, I-VAWHDSA] |
[NT AUTHORITY] |
[C:\icm\pcce\aw\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z] |
[93f3e8fb47c860b1e51e77c4c8a113cd] |
[e01d84238ee1050f10c3199ecd00cc8918c6cc3b] |
[ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3] |
[ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5] |
[172.25.196.40, 172.17.196.47] |
[172.25.196.40, 172.17.196.47] |
2 |
Success |
purgeold.bat |
C:\icm\pcce\aw\bin\ |
|
406 |
93f3e8fb47c860b1e51e77c4c8a113cd |
|
|
Not Signed |
2021-10-07 20:04:52 +0000 UTC |
2021-10-07 20:04:52 +0000 UTC |
e01d84238ee1050f10c3199ecd00cc8918c6cc3b |
ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3 |
ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1694645d5e73d2175861326fa89194dc2a82c7e21d1dcd894800714772c170a8 |
[68a62c254d354bf933e4d350, 68a62c4fe0cb7d1d0b6ef990, 68a62c4fe0cb7d1d0b6ef999, 68a62ca798fdd4aa74a31739, 68a62dbdd3f22bde37b5f4ec, 68a62dbdd3f22bde37b5f4f5] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ceTe.DynamicPDF.40.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:17Z, 2025-08-20T20:12:23Z, 2025-08-20T20:12:59Z, 2025-08-20T20:14:25Z, 2025-08-20T20:14:33Z, 2025-08-20T20:17:21Z] |
[998fde807ceac8f3bbd4916ff954fb8c] |
[53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520] |
[18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7] |
[68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
ceTe.DynamicPDF.40.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
DynamicPDF for .NET (Framework 4.0) |
4350464 |
998fde807ceac8f3bbd4916ff954fb8c |
DynamicPDF for .NET |
6.0.3.40 |
Not Signed |
2023-05-24 16:40:28 +0000 UTC |
2023-05-24 16:40:28 +0000 UTC |
53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520 |
18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7 |
68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364 |
2025-05-06 18:27:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2ea93e5d1e2693678dc2163c15548f9ba23b053efe5e52fffad3f4ee0c7c20c0 |
[68a62c61512061b0a03001ec, 68a62d65c4509fd4abd51f68] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\WorkflowEngine.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] |
[656f58217faf83ea2207b1aabc3b938c] |
[810871eb710d1cf89c23775cd24d6b72587118a7] |
[c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54] |
[bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
WorkflowEngine.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
WorkflowEngine |
450560 |
656f58217faf83ea2207b1aabc3b938c |
WorkflowEngine |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:42 +0000 UTC |
2023-06-20 18:28:42 +0000 UTC |
810871eb710d1cf89c23775cd24d6b72587118a7 |
c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54 |
bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce |
2025-07-11 22:49:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2d9e507ea0396ee9d5c53adb9c9779afdd27a7640b28727be4db46148af51998 |
[68a62c61512061b0a03001eb, 68a62d65c4509fd4abd51f67] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\PDFEditor.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] |
[52e620fb3543935b9751f35b299fdc9a] |
[03375654731e846fb0937dd67f3ae03d553f8a01] |
[832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323] |
[63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
PDFEditor.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
PDFEditor |
109568 |
52e620fb3543935b9751f35b299fdc9a |
PDFEditor |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
03375654731e846fb0937dd67f3ae03d553f8a01 |
832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323 |
63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 268f47905bc543b8f4470c34eed1c7e5dabf07bb05c82b60fa57a92eb0b2c613 |
[68a62c57d96ab29dcabe19b0, 68a62d65c4509fd4abd51f5f] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Fastflow.Migration.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z] |
[bcbe340f0385ed5826017df20efa6eb4] |
[59625c822c0d5e524694a47fbf1286a3f41b0ec2] |
[5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7] |
[9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Fastflow.Migration.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common.Migration |
135168 |
bcbe340f0385ed5826017df20efa6eb4 |
FormFast.Common.Migration |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:44 +0000 UTC |
2023-06-20 18:28:44 +0000 UTC |
59625c822c0d5e524694a47fbf1286a3f41b0ec2 |
5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7 |
9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2f1ab6bfc8904fb057a0b212fc8180d8b2d9eddef225312b93bc83d0dd5838d0 |
[68a62c61512061b0a03001e7, 68a62d65c4509fd4abd51f63] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] |
[cd91d4125d2d7ea93bd38165e12a535f] |
[dd21e13ba0794addd890f89f5640cac6376722e6] |
[7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326] |
[739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Utility |
140800 |
cd91d4125d2d7ea93bd38165e12a535f |
FormFast.Utility |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:36 +0000 UTC |
2023-06-20 18:28:36 +0000 UTC |
dd21e13ba0794addd890f89f5640cac6376722e6 |
7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326 |
739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 14ca60e7625341579b1a31b4434c90b105cc67d697b6437ff26d9763228e9eea |
[68a62c2f20141caa2973b293, 68a62cb1297e2a61afff0f65] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Base.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:22Z, 2025-08-20T20:14:33Z] |
[677d91239489ea7691c5d9bda03dc3ec] |
[83fbd4375983c2ccc048304d475521e933e55a7e] |
[654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b] |
[c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Base.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
Base |
200192 |
677d91239489ea7691c5d9bda03dc3ec |
Base |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:42 +0000 UTC |
2023-06-20 18:27:42 +0000 UTC |
83fbd4375983c2ccc048304d475521e933e55a7e |
654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b |
c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131 |
2025-05-06 18:29:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ff9f06adf36fa5057cc3505bfcc119aaecb03fc327377c26a75042f54f61bc5b |
[68a62c57d96ab29dcabe19ac, 68a62d65c4509fd4abd51f5b] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.XmlSerializers.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] |
[83cdf6c2e5d109f7345c49628f408fb6] |
[f7921a39ae4d43b99f5aee80257c703702cd2657] |
[d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022] |
[734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.ECM.XmlSerializers.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
|
631296 |
83cdf6c2e5d109f7345c49628f408fb6 |
|
1.0.0.0 |
Not Signed |
2023-06-20 18:28:40 +0000 UTC |
2023-06-20 18:28:40 +0000 UTC |
f7921a39ae4d43b99f5aee80257c703702cd2657 |
d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022 |
734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 015453e136abf50cbbbf808b57b7c5a00f91d91129c922c4857a95afa5a23664 |
[68a62c390de66b6bd84ed635, 68a62cb1297e2a61afff0f77] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] |
[6b971ede90737ede2770db65b7fab0db] |
[b754cd469ae436842b3d24bc04b4e2775b971cd6] |
[ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e] |
[5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ |
FormFast.Utility |
140800 |
6b971ede90737ede2770db65b7fab0db |
FormFast.Utility |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:50 +0000 UTC |
2023-06-20 18:27:50 +0000 UTC |
b754cd469ae436842b3d24bc04b4e2775b971cd6 |
ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e |
5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090 |
2025-05-06 18:28:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 00e3c6e87750065c6bf4ac8e05b77166dbd90c677c933984055f0db56dbf13c9 |
[68a62c57d96ab29dcabe19ae, 68a62d65c4509fd4abd51f5d] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Sfdc.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] |
[b49cce3d89159feea34f0a8c83dec7f9] |
[4f11eb48337e1c91f298f0288db6ef5c6fc43b54] |
[86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705] |
[c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Common.Sfdc.dll |
C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ |
FormFast.Common.Sfdc |
44544 |
b49cce3d89159feea34f0a8c83dec7f9 |
FormFast.Common.Sfdc |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:42 +0000 UTC |
2023-06-20 18:28:42 +0000 UTC |
4f11eb48337e1c91f298f0288db6ef5c6fc43b54 |
86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705 |
c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3 |
2025-07-11 22:49:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fb86afd3c6fcdad7c494651481b906b004846066c0d130d10cfd1738d4b54f9e |
[68a62c390de66b6bd84ed64f, 68a62cbbbad0c3891c052030] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z] |
[5b6aebd86fb1e8c33afe527100c348e3] |
[696abaa1ec222d4ddf57c0b1472bff9fdcb38985] |
[9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04] |
[b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
FormFast.Utility.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
FormFast.Utility |
140800 |
5b6aebd86fb1e8c33afe527100c348e3 |
FormFast.Utility |
1.0.0.0 |
Not Signed |
2023-06-20 18:27:38 +0000 UTC |
2023-06-20 18:27:38 +0000 UTC |
696abaa1ec222d4ddf57c0b1472bff9fdcb38985 |
9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04 |
b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82 |
2025-05-06 18:29:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fbc7fdf61a20576e09a33947853cc2024cd0249137e7db6b4674632ccacde896 |
[68a3146b5f0c41860c8c850d, 68a3146b5f0c41860c8c8560] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\html\__pycache__\entities.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[41e82f02e4f6d79a79511257656da6c4] |
[7643352f9bd86afb0c0981f14b6ec2e360f9805f] |
[bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b] |
[f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
entities.cpython-313.pyc |
C:\Program Files\Python\Lib\html\__pycache__\ |
|
97677 |
41e82f02e4f6d79a79511257656da6c4 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
7643352f9bd86afb0c0981f14b6ec2e360f9805f |
bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b |
f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ffe3124098b0563b1e14d197acb10ddebf2e80a6fb27e7946acbd9b171bb62b2 |
[68a4b0fb13fac5171eeef0d6] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Helper.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:08Z] |
[0dddb86c5714681c7ed39d2bd59b1753] |
[994abcb6dbb3dee2ba51f2e0b530dbdf640c0857] |
[fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24] |
[6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.AlliancePD.UI.Helper.dll |
C:\Program Files (x86)\Cyrun\Alliance 7 Client\ |
Cyrun.AlliancePD.UI.Helper |
76800 |
0dddb86c5714681c7ed39d2bd59b1753 |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 20:45:36 +0000 UTC |
2025-05-22 18:18:01 +0000 UTC |
994abcb6dbb3dee2ba51f2e0b530dbdf640c0857 |
fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24 |
6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64 |
2025-05-22 18:54:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 004dc4972b75bfbd1376f38f1f4b423d21a2a79e908a721697d1a1db3d7055f7 |
[68a240c4e6cd2ce37129562d] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hf4ikxag.z2f.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:51:08Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_hf4ikxag.z2f.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:51:08 +0000 UTC |
2025-08-17 20:51:08 +0000 UTC |
|
|
|
2025-08-17 20:51:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0339b3dae7a5b6041c5bbb3def63e10b124a467d5e1f2bf3af0ab8fa500073ce |
[68a5c8eceb9e7b7716dce208] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\Talis\Atlas\temp\DownloadFiles.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:08:58Z] |
[a3a891260bd6c4b8107fc2851f015d10] |
[8ff719c4242076946baef37ae6acef7fdc21f05b] |
[0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe] |
[9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
DownloadFiles.ps1 |
C:\Talis\Atlas\temp\ |
|
1905 |
a3a891260bd6c4b8107fc2851f015d10 |
|
|
Not Signed |
2025-08-20 13:08:55 +0000 UTC |
2025-08-20 13:08:55 +0000 UTC |
8ff719c4242076946baef37ae6acef7fdc21f05b |
0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe |
9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f484f3a80aa0ae9108b1876a147263a9fb5e87ec1065deadc3cb93ff70492723 |
[68a36b076a7f8fce5714f797] |
[2] |
[my10040sa] |
[i-hventana] |
[WVUHS] |
[D:\InterSystems\HSFoundation\bin\CTerm.exe] |
[Servers] |
[Servers Audit] |
[v2264.862] |
["d:\intersystems\hsfoundation\bin\cterm.exe" /console=cn_ap:HSFOUNDATION2017[]:] |
[Not Signed] |
[D:\InterSystems\HSFoundation\bin\Ccontrol.exe] |
[D:\InterSystems\HSFoundation\bin\csystray.exe] |
[2025-08-18T18:03:45Z] |
[d1b5aeda78111abc1b7b6a79a00626e3] |
[91005476734d54bd9b933eb07d058f9cd4d57132] |
[bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17] |
[f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc] |
[172.17.253.63] |
[172.17.253.63] |
1 |
Success |
CTerm.exe |
D:\InterSystems\HSFoundation\bin\ |
Cache' Terminal |
286208 |
d1b5aeda78111abc1b7b6a79a00626e3 |
Cache' |
2017.2.2.865.3.19109 |
Not Signed |
2019-07-16 21:11:30 +0000 UTC |
2019-07-16 21:11:30 +0000 UTC |
91005476734d54bd9b933eb07d058f9cd4d57132 |
bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17 |
f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc |
2025-08-18 18:03:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 05483be54fb184ec487226ec2f966cb470c73998877ae425b560dffb5fca531d |
[68a35c84047df79ddfd2415c] |
[2] |
[ghermanc] |
[I-CAJump] |
[WVUHS] |
[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\tmpEXO_evkptwwz.wjs.psm1] |
[Servers] |
[Servers Audit] |
[v2260.859] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T17:01:20Z] |
[42fefd8b7428fc4f9aa0c97458e55c4f] |
[59be0f0decf9173c38d32fd5716316788fc77ad5] |
[94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e] |
[0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_evkptwwz.wjs.psm1 |
C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\ |
|
2308296 |
42fefd8b7428fc4f9aa0c97458e55c4f |
|
|
Not Signed |
2025-08-18 17:01:20 +0000 UTC |
2025-08-18 17:01:20 +0000 UTC |
59be0f0decf9173c38d32fd5716316788fc77ad5 |
94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e |
0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c |
2025-08-18 17:01:56 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 05d621eeca2e4255114d141aa7d6c5ccf117856e38d20d40678858873ba58e24 |
[68a50205736560052fcd1831] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_wlmxcr2s.rhk.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-19T23:00:14Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_wlmxcr2s.rhk.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 23:00:14 +0000 UTC |
2025-08-19 23:00:14 +0000 UTC |
|
|
|
2025-08-19 23:00:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0623b5670b57e995db06e8dba8e8ec36c7879f0d12dfd3f1c21f0aec1da7ef49 |
[68a226e5ea27d2f962eac02e] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\tmpEXO_pugsznk4.2dj.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T19:00:49Z] |
[037fb6f1dc934749df5f6ce3c6c612c4] |
[f803186e516651994aa74b575f9814d93d526eea] |
[3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59] |
[cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_pugsznk4.2dj.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\ |
|
2290479 |
037fb6f1dc934749df5f6ce3c6c612c4 |
|
|
Not Signed |
2025-08-17 19:00:48 +0000 UTC |
2025-08-17 19:00:48 +0000 UTC |
f803186e516651994aa74b575f9814d93d526eea |
3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59 |
cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75 |
2025-08-17 19:00:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0629fc635898b51e5d2316c8f7d34ea75b613ae34e1034bb1179374ac9de65a6 |
[68a471ad04130eaeee8f8d04] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:44:24Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:44:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 064def080c56265fe8621ad7b5f4e9a60f08b51475e7dccae02c6b86685a47b5 |
[68a19b31c2e510c554e3fb34] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jgzkpk0j.mzq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:04:45Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_jgzkpk0j.mzq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:04:45 +0000 UTC |
2025-08-17 09:04:45 +0000 UTC |
|
|
|
2025-08-17 09:04:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 00cfdd2c637c38676581b9cf2cdb647024cb185f4ef32d3f89b1d9f0b8d26848 |
[68a4d180b5900ae066920597] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:33:11Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:33:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0120c65751377d7c151d92059b5b01184b00e9a6579a8c1099d5fb7c54fd1276 |
[68a3146b5f0c41860c8c8547] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\bisect.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[f29725aff50c74333893a8c32d856e5e] |
[506feae5c909e2b9651a60062b9ce938a685f18f] |
[80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee] |
[823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
bisect.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
3505 |
f29725aff50c74333893a8c32d856e5e |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
506feae5c909e2b9651a60062b9ce938a685f18f |
80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee |
823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 013824dd98d654ae6fa35cbb46d29d79ca49f6f084fef8b95f4abff4fe4ce2f7 |
[68a36b2f814a7aa0d93290c9] |
[2] |
[my10040sa] |
[i-hventana] |
[WVUHS] |
[D:\InterSystems\HSFoundation\bin\CStudio.exe] |
[Servers] |
[Servers Audit] |
[v2264.862] |
["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CSTUDIO.EXE" /servername="HSFOUNDATION2017"] |
[Not Signed] |
[D:\InterSystems\HSFoundation\bin\csystray.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T18:04:27Z] |
[b41afb09655750e9caf2bd657d3e3d8c] |
[2b26fa2dc7200223a73563e63392f3caf4cb9440] |
[034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a] |
[27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5] |
[172.17.253.63] |
[172.17.253.63] |
1 |
Success |
CStudio.exe |
D:\InterSystems\HSFoundation\bin\ |
Cache' Studio |
3734016 |
b41afb09655750e9caf2bd657d3e3d8c |
Cache' |
2017.2.2.865.3.19109 |
Not Signed |
2019-07-16 21:09:56 +0000 UTC |
2019-07-16 21:09:56 +0000 UTC |
2b26fa2dc7200223a73563e63392f3caf4cb9440 |
034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a |
27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5 |
2025-08-18 18:04:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f4d0d3de3348731c003a4021605d4d86a38d8d915555494bde85645d748ffc4f |
[68a15a1322e6ea61a3496d50] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1opx1ngt.s4i.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:26:52Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_1opx1ngt.s4i.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:26:52 +0000 UTC |
2025-08-17 04:26:52 +0000 UTC |
|
|
|
2025-08-17 04:26:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 19662d119168e78bacd4b3a8bd2078e969aae42289688dc5f70271ba774c9b2e |
[68a32fce1e3a6c23a9ae63ca] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2255.853] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T13:51:06Z] |
[431533e50a4a795e0182a41c54b870a6] |
[363cf7b11b02371fbdbd3d036cf77f4f477ef7d9] |
[10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f] |
[7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2226 |
431533e50a4a795e0182a41c54b870a6 |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 13:51:02 +0000 UTC |
363cf7b11b02371fbdbd3d036cf77f4f477ef7d9 |
10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f |
7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc |
2025-08-18 13:51:10 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 197fea9fc376fde139a59fa4689a84ebc896b2afd1802d222c6dc86f6810c078 |
[68a16f7de3fc40447cda5394] |
[2] |
[SYSTEM] |
[WH1EMGSQL1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1cwr4aqw.s5r.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:58:09Z] |
[] |
[] |
[] |
[] |
[172.18.99.115] |
[172.18.99.115] |
1 |
Success |
__PSScriptPolicyTest_1cwr4aqw.s5r.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:58:09 +0000 UTC |
2025-08-17 05:58:09 +0000 UTC |
|
|
|
2025-08-17 05:58:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 19bbcc16c175702ae348e14d03804631d4f852e8d03c5001e4255c2e583fb086 |
[68a50936a0536b4a4308bb01] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\DatascopeB_5_0_2_9.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[Not Signed] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:30:55Z] |
[91d6ed9ec25335c8993911305fa93660] |
[9e017857441e23e5cc32d68e6f941671dac75216] |
[111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3] |
[36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
DatascopeB_5_0_2_9.msi |
C:\Users\CA_gs10109\Downloads\ |
|
828928 |
91d6ed9ec25335c8993911305fa93660 |
|
|
Not Signed |
2025-08-19 23:30:20 +0000 UTC |
2025-08-19 23:30:21 +0000 UTC |
9e017857441e23e5cc32d68e6f941671dac75216 |
111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3 |
36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139 |
2025-08-19 23:31:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 19f6ab70ded4feceef4245317e13cc2723dba13451347a16410ff088aa94ed9e |
[68a4ac67cfad262556985011, 68a4dda823653165b0c6ea28] |
[2] |
[CA_Jnt_DAWS3] |
[i-hMSFT-ODA] |
[WVUHS] |
[C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\Microsoft.PowerShell.Oms.Assessments.dll] |
[Servers] |
[Servers Audit] |
[v2278.870, v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T16:51:09Z, 2025-08-19T20:20:41Z] |
[73567d31f6f5a57f178f72390032e4a7] |
[da44ee8ec0db86402e5d6c017827ba77fa19bf72] |
[86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483] |
[ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac] |
[172.17.23.172] |
[172.17.23.172] |
1 |
Success |
Microsoft.PowerShell.Oms.Assessments.dll |
C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\ |
Microsoft.PowerShell.Oms.Assessments |
111616 |
73567d31f6f5a57f178f72390032e4a7 |
Microsoft.PowerShell.Oms.Assessments |
1.0.0.0 |
Not Signed |
2024-10-07 15:47:40 +0000 UTC |
2024-10-07 15:46:58 +0000 UTC |
da44ee8ec0db86402e5d6c017827ba77fa19bf72 |
86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483 |
ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac |
2025-07-15 16:51:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1aa0f52be8015d5624a34baa8ff09a5e51a84ee1d541fefb6e42312cd8266209 |
[68a1a82b7de272dd853193b1] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_768146f715644334a001f4d6f657b99a.dll] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-17T10:00:07Z] |
[] |
[] |
[] |
[] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
expression_host_768146f715644334a001f4d6f657b99a.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3366.16 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-17 10:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 141dbcf08788c469ba3d747db24400108920ec7fb03ce8e7847a0d537bec5c38 |
[68a50589eadcd7cce3f5d686] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-1BA45DA5-154D-4207-8ED3-5352625CA0B3\CitrixReceiverUpdater.exe] |
[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] |
[2025-08-19T23:11:52Z] |
[97a7cc2a8414b3679444b968b6b029b0] |
[64783c7c1b6a38235cd866c2446599867f6ee497] |
[98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225] |
[301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
rm.bat |
C:\Users\teknicor\AppData\Local\Temp\4\ |
|
7357 |
97a7cc2a8414b3679444b968b6b029b0 |
|
|
Not Signed |
2025-08-19 23:11:52 +0000 UTC |
2025-08-19 23:11:52 +0000 UTC |
64783c7c1b6a38235cd866c2446599867f6ee497 |
98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225 |
301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a |
2025-08-19 23:15:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 145b126185eb42beb5366b5d471b48d5698210a0e64a1cc0c1e8144071e98569 |
[68a55cde636cfc7814189cce] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_efld4jwd.fx5.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:27:53Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_efld4jwd.fx5.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:27:53 +0000 UTC |
2025-08-20 05:27:53 +0000 UTC |
|
|
|
2025-08-20 05:27:58 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fcae2074a7a5deea742cb25c4efb09ae63fa3367e2f17c2d0e5487fa26500914 |
[68a31c78c8293406e9c76873] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gxd1sdoj.agw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:28:37Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_gxd1sdoj.agw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:28:37 +0000 UTC |
2025-08-18 12:28:37 +0000 UTC |
|
|
|
2025-08-18 12:28:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fd451e5b061a4b3db0872c23ae17414ac8815eee11cce644fe1d63abc8c122b0 |
[68a3146b5f0c41860c8c84fb, 68a3146b5f0c41860c8c8558] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\http\__pycache__\server.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[eeb247742b582d6575eb73a83ad57a68] |
[683d7c49128654f5cb1609e957808e12e1b16dcf] |
[a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf] |
[f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
server.cpython-313.pyc |
C:\Program Files\Python\Lib\http\__pycache__\ |
|
55819 |
eeb247742b582d6575eb73a83ad57a68 |
|
|
Not Signed |
2024-11-22 22:08:48 +0000 UTC |
2024-11-22 22:08:48 +0000 UTC |
683d7c49128654f5cb1609e957808e12e1b16dcf |
a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf |
f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fda37cbb903f43d9b3649e44db493160207ccaaa1f24542ffa035682ac8a8e07 |
[68a4ccc785b914a60d739e4a] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fda97f6ec8bc3a28270dd0d5800b6e1309e711a0fef9ec6984819c59092fd1f2 |
[68a17b3ec86486ccb41646c3] |
[2] |
[SYSTEM] |
[i-v3MAppTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tzzqoamc.4zw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:48:25Z] |
[] |
[] |
[] |
[] |
[172.17.23.50] |
[172.17.23.50] |
1 |
Success |
__PSScriptPolicyTest_tzzqoamc.4zw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:48:25 +0000 UTC |
2025-08-17 06:48:25 +0000 UTC |
|
|
|
2025-08-17 06:48:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fdb926e2256cde49c147fd8d3d59d73598ba9d09c498c6d52cfbe6285cc6048e |
[68a3146b5f0c41860c8c8511, 68a3146b5f0c41860c8c8564] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\errors.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[49174a480c734fd1a4b7c0b4f048d18b] |
[f134bd12839067b16c719dcddd7feb54e228645f] |
[26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e] |
[c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
errors.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
7588 |
49174a480c734fd1a4b7c0b4f048d18b |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
f134bd12839067b16c719dcddd7feb54e228645f |
26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e |
c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1c4f4a46ffb6c9b0b7b73281cc81801cd838a1d4b95e5bd01ed90e38527489ca |
[68a3146b5f0c41860c8c8546, 68a3146b5f0c41860c8c8574] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\traceback.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[55adb6e2f9b392dd9d272956ce4405f8] |
[245bf99c09cd2c80e54d4d6c044a46088e0712f1] |
[1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e] |
[6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
traceback.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
70311 |
55adb6e2f9b392dd9d272956ce4405f8 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
245bf99c09cd2c80e54d4d6c044a46088e0712f1 |
1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e |
6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1c91077087037870eb7a63ed7d989ad265f5c3c8f356ccd3e724aefacdae6905 |
[68a4a67eb5e8554bc2e83559] |
[2] |
[be10045eu] |
[i-nsdprodmon1] |
[WVUHS] |
[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:29:43Z] |
[b12cf42ff23c2057b9f1443b8014f97a] |
[174c49890a68701f720d6ac4f822aff1798dc9d2] |
[5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822] |
[9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d] |
[172.17.252.208] |
[172.17.252.208] |
1 |
Success |
PC Info.ps1 |
\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ |
|
2060 |
b12cf42ff23c2057b9f1443b8014f97a |
|
|
Not Signed |
2025-04-22 13:59:56 +0000 UTC |
2025-08-19 16:29:43 +0000 UTC |
174c49890a68701f720d6ac4f822aff1798dc9d2 |
5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822 |
9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d |
2025-08-19 16:29:50 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1c99e83e5bb1e752b6a081d36ecb4a804a4bf6a51f76c096ef4a30ebc8b44345 |
[68a34d6610b57c5bffc57daf] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:29Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1cd31123183f98fa54f76a0aefddad0b56efda5633c421baad6c049271c47811 |
[68a4ccc785b914a60d739e49, 68a4ce1fc826337212f53be9, 68a4d07753a851daf11e6933, 68a4d07753a851daf11e6946, 68a4d07753a851daf11e694d, 68a4d2d1ff2b441b8442812b, 68a4d2d1ff2b441b8442813e, 68a4d2d1ff2b441b84428145] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\WinError.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] |
[98c935ab759b31b868ce685c550a2d27] |
[010b6e43cb224a92837e476bab31e4f8983cf513] |
[6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79] |
[6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
WinError.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\ |
|
73728 |
98c935ab759b31b868ce685c550a2d27 |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:13:00 +0000 UTC |
010b6e43cb224a92837e476bab31e4f8983cf513 |
6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79 |
6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1d36cdd250632c13e621811c31c46889a5b8e5703cefdf3cc1d70d8fd33ade51 |
[68a2429a92c7d722f343012e] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4u5rhbcj.vq2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:59:00Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_4u5rhbcj.vq2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:59:00 +0000 UTC |
2025-08-17 20:59:00 +0000 UTC |
|
|
|
2025-08-17 20:59:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1db1a44f9537b17f981cac0e51c92988e6f6e64f555249b2e267276ac42c6643 |
[68a4c47e2db3c760ec3d2a2c] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_5b304b09fa8941c399c57da1067eb872.dll] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T18:37:42Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_5b304b09fa8941c399c57da1067eb872.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 18:37:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 179832435871d03884d0c7276e49a11f82974cdb823c3738f69ab8092647fcac |
[68a17d46e874e98975d27502] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjl5psll.in3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:57:01Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_hjl5psll.in3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:57:01 +0000 UTC |
2025-08-17 06:57:01 +0000 UTC |
|
|
|
2025-08-17 06:57:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 17b63ace273280d515dc03790cc9616ab0e642ac676752b7a8428f489ab2c6d6 |
[68a22f92c12f0e944e5d68ee] |
[2] |
[SYSTEM] |
[DP-Fairmont] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gdwb5ppl.3to.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:37:41Z] |
[] |
[] |
[] |
[] |
[172.16.121.132] |
[172.16.121.132] |
1 |
Success |
__PSScriptPolicyTest_gdwb5ppl.3to.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:37:41 +0000 UTC |
2025-08-17 19:37:41 +0000 UTC |
|
|
|
2025-08-17 19:37:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 17e48334a38dbd836fe464e5c186505984d2cce8d90c271067a21ce18c41d6f2 |
[68a3f034978467a3921f39ab] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T03:31:58Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 03:32:04 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2063d0c99b559ee70851bb6ef469403083548a7de9815d5d75c9091079f51e7a |
[68a5239e621d09b2b1ed5e47] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfigurationSchema.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:33Z] |
[4d713ca1bcb6151d41a165fa97487752] |
[d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1] |
[b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2] |
[ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
MonitoringConfigurationSchema.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
187392 |
4d713ca1bcb6151d41a165fa97487752 |
|
1.0.8565.40745 |
Not Signed |
2023-06-15 02:38:14 +0000 UTC |
2023-06-15 02:38:14 +0000 UTC |
d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1 |
b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2 |
ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 208fe14221f4de86e1d3367e7e3af0431b468c606a965f94078806268cd1fcd9 |
[68a5c8eceb9e7b7716dce1f8, 68a5ca39b5df6e9c598d9a0a, 68a5ca39b5df6e9c598d9a17, 68a5ccf2ddfdba423e48862d, 68a5ccf2ddfdba423e48863b, 68a5ccf2ddfdba423e488649, 68a5ccf2ddfdba423e488656, 68a5ccf2ddfdba423e488663, 68a5ccf2ddfdba423e488670, 68a5ccf2ddfdba423e48867d, 68a5ccf2ddfdba423e48868a] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\VstsTaskSdk.psm1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] |
[2025-08-20T13:08:51Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] |
[a2b60434350ac0955961357829a8a1c5] |
[8e37dd79783b74df97a476dff753c6e1753affb2] |
[5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0] |
[bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
VstsTaskSdk.psm1 |
C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ |
|
6727 |
a2b60434350ac0955961357829a8a1c5 |
|
|
Not Signed |
2025-08-20 13:08:41 +0000 UTC |
2024-01-20 18:07:08 +0000 UTC |
8e37dd79783b74df97a476dff753c6e1753affb2 |
5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0 |
bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 209d605e45aba340d5ddd93ce438fd4f8178d56ecb4911f3c4cd04badca4f0cd |
[68a1bfd674ff3871c4d1c5c9] |
[2] |
[SYSTEM] |
[i-nosccapp2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jba2l2dq.vnn.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T11:41:04Z] |
[] |
[] |
[] |
[] |
[172.17.250.140] |
[172.17.250.140] |
1 |
Success |
__PSScriptPolicyTest_jba2l2dq.vnn.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 11:41:04 +0000 UTC |
2025-08-17 11:41:04 +0000 UTC |
|
|
|
2025-08-17 11:41:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 20aedfcc2009362bc8633f6532da1ed127c65bfe62a162c12bec185791071da2 |
[68a3146b5f0c41860c8c84f3, 68a3146b5f0c41860c8c8524] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\operator.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[4d902c5d88140a642fe4ef1a19911781] |
[faf9cceba79990efbfcc000ae2d94a21dba89a1f] |
[a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140] |
[54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
operator.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
17367 |
4d902c5d88140a642fe4ef1a19911781 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
faf9cceba79990efbfcc000ae2d94a21dba89a1f |
a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140 |
54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 20b9ac86095a725783035db578d94d79959e492461d50fd0f8ab6274eab39534 |
[68a47bc2880fc3ea1ff87615] |
[2] |
[AdminJKM] |
[PDQ-INFRA] |
[WHI] |
[\\wheelinghospital.com\sysvol\wheelinghospital.com\Policies\{4E0157AA-F18B-43AF-8DC2-A4FC7E414E88}\User\Scripts\Logoff\ClinicalInformatics_Servers.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\gpscript.exe] |
[2025-08-19T13:27:24Z] |
[eae3ad65cf0b5377f069a0667ba10043] |
[a37860bb1e075fa074434b286d2e0b5e7414368f] |
[d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee] |
[aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104] |
[172.24.26.60] |
[172.24.26.60] |
1 |
Success |
ClinicalInformatics_Servers.ps1 |
\\wheelinghospital.com\SysVol\wheelinghospital.com\Policies\{44822848-47D6-4FB7-BB91-7BBCA7B70574}\User\Scripts\Logon\ |
|
2091 |
eae3ad65cf0b5377f069a0667ba10043 |
|
|
Not Signed |
2015-05-12 19:09:52 +0000 UTC |
2017-09-06 21:55:22 +0000 UTC |
a37860bb1e075fa074434b286d2e0b5e7414368f |
d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee |
aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104 |
2025-08-02 13:43:30 +0000 UTC |
[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}, {'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 212af7c4b44a918b3060ef55417f27f14b15bf0f7a19cd52de911c36d5ef9ea2 |
[68a4ccc785b914a60d739e4d, 68a4d07753a851daf11e6935, 68a4d2d1ff2b441b8442812d] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisitectl.bat] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z] |
[514ed83234038d4fdb35855046c46bea] |
[6ddf7c13900920915184c88693c24703856086d0] |
[415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091] |
[67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
hcisitectl.bat |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ |
|
133 |
514ed83234038d4fdb35855046c46bea |
|
|
Not Signed |
2021-10-20 13:42:29 +0000 UTC |
2021-10-20 13:42:29 +0000 UTC |
6ddf7c13900920915184c88693c24703856086d0 |
415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091 |
67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1ac7ceb23e48ad66e86d0e748a2eb1125d5131a459d24779854d2bd381a9a2dc |
[68a4855388937a93ff144377] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Web.Core.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:08:10Z] |
[e420fcc66faf3bb597920bc95092bc82] |
[225c1cb6bde189a744287718d5838279c6495f70] |
[8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b] |
[f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Authentication.Web.Core.dll |
C:\Stryker\iBed Server Application\Stryker.Authentication\ |
Stryker.iBedServer.Authentication.Web.Core |
18432 |
e420fcc66faf3bb597920bc95092bc82 |
Stryker.iBedServer.Authentication.Web.Core |
1.0.0 |
Not Signed |
2023-03-16 10:22:22 +0000 UTC |
2023-03-16 10:22:22 +0000 UTC |
225c1cb6bde189a744287718d5838279c6495f70 |
8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b |
f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58 |
2025-08-19 14:08:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1b096ab7c58272c64f17e7a582777c8e9ea3d42f42e14b605ec148acf45d3fd1 |
[68a1abc4f0472d34305de372] |
[2] |
[SYSTEM] |
[i-nctx-pvs4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_rupfwq53.gwm.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:15:24Z] |
[] |
[] |
[] |
[] |
[172.17.246.6] |
[172.17.246.6] |
1 |
Success |
__PSScriptPolicyTest_rupfwq53.gwm.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:15:24 +0000 UTC |
2025-08-17 10:15:24 +0000 UTC |
|
|
|
2025-08-17 10:15:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1b1e6e65d2b28da1a31023fe1c0a4071c001db0ab55947e0d2d50a4aa335e321 |
[68a5c7657732fa5006a7acf0] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe -package:"D:\QS1\QAU\Updates\QAUInst.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\" -tempdisk1folder:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\" -IS_OriginalLauncher:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\QAUInst.exe"] |
[Not Signed] |
[D:\QS1\QAU\Updates\QAUInst.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:02:23Z] |
[c1478d20d872971cf6b4615e79ecfa72] |
[31faaac28aa42532c4121fa4ea689db8248db888] |
[747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215] |
[58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
QAUInst.exe |
C:\Windows\Temp\{7ECE6BBA-38D7-4AA8-BD90-D64A990063CA}\ |
InstallScript Setup Launcher Unicode |
914944 |
c1478d20d872971cf6b4615e79ecfa72 |
QS/1 Automatic Updates |
1.0.0.297 |
Not Signed |
2025-05-22 21:33:33 +0000 UTC |
2025-05-22 21:33:33 +0000 UTC |
31faaac28aa42532c4121fa4ea689db8248db888 |
747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215 |
58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502 |
2025-05-22 21:33:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1c0d104a8743951cc262698fd2ad920b4fcfed18090a9f1a67144ee21b7b0049 |
[68a1b11e62bedacdcc003190] |
[2] |
[SYSTEM] |
[u-nLanSweep1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_10ru0x02.3yt.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:38:12Z] |
[] |
[] |
[] |
[] |
[172.25.17.127] |
[172.25.17.127] |
1 |
Success |
__PSScriptPolicyTest_10ru0x02.3yt.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:38:12 +0000 UTC |
2025-08-17 10:38:12 +0000 UTC |
|
|
|
2025-08-17 10:38:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 233cda908dbe688d1964cdba2ae0c67c0336dd94f040e969e824e4716fafa610 |
[68a4cf1f4971da3ff4f65d7b] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:23:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:23:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 233fd2e9b361be99ce56a380a8ef954b2f0f14e7571e470860b9a862e4a4b4ed |
[68a180c1aa5e4fe2dc53b3d5] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqv4gtvi.vua.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:11:54Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_dqv4gtvi.vua.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:11:54 +0000 UTC |
2025-08-17 07:11:54 +0000 UTC |
|
|
|
2025-08-17 07:12:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 23d2a28820aa7269c8e12b57fe64354de0b4e14f7ea29bf7a7f4dab6efbab0fc |
[68a5d0f7f298663174d8aef1] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_bmeb2ak5.xwg.ps1] |
[Servers] |
[Servers Audit] |
[v2291.881] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:43:16Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_bmeb2ak5.xwg.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 13:43:16 +0000 UTC |
2025-08-20 13:43:16 +0000 UTC |
|
|
|
2025-08-20 13:43:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2476c367fffa78e58eb0abf44459362577b5ff6503f33a81f07f5748120d3e4c |
[68a3b07b89708f7e107efecf] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_pympxbs0.15a.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-18T23:00:04Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_pympxbs0.15a.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 23:00:04 +0000 UTC |
2025-08-18 23:00:04 +0000 UTC |
|
|
|
2025-08-18 23:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 24caf033e838c16b0cd2adbc677d4d30b06124b25b7a2d2c11781fbd86da2f84 |
[68a311cdc2d0d6e3eb77f21b] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\RoboCopyStuff.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:49Z] |
[d7083504aa22f3989277128edc021706] |
[1a6bc93829561a0da597a0e7118345b217271476] |
[617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838] |
[ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
RoboCopyStuff.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
638 |
d7083504aa22f3989277128edc021706 |
|
|
Not Signed |
2025-06-06 12:04:04 +0000 UTC |
2025-06-06 20:43:59 +0000 UTC |
1a6bc93829561a0da597a0e7118345b217271476 |
617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838 |
ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2522bec3a9e8b209bd9a270dfd1bdc12122b5d6f0eabca8d1d0446d744fc6dfe |
[68a232eef903f5e7e0112d84] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a3ih1mon.uvf.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:52:02Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_a3ih1mon.uvf.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:52:02 +0000 UTC |
2025-08-17 19:52:02 +0000 UTC |
|
|
|
2025-08-17 19:52:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1df39083a555ad2e4301b24f8970c3cf88fad01b9393cb5f8e7e5aee5332cac7 |
[68a2408816f43bddda2dc0c4] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hlln0dgm.sse.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:50:09Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_hlln0dgm.sse.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:50:09 +0000 UTC |
2025-08-17 20:50:09 +0000 UTC |
|
|
|
2025-08-17 20:50:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1e3ae688305501b61ca04a7b50d76d4e55e84350f6966c695ae0c0c8c2076bfb |
[68a523949cec397f02de9f61] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\IPAddressControlLib.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:31Z] |
[d7cb593f2a75e63808f0520ecec6d003] |
[ecf814407df1abfecc4a93e83579a1463c33aca6] |
[cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936] |
[54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
IPAddressControlLib.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
28672 |
d7cb593f2a75e63808f0520ecec6d003 |
|
1.0.8565.40691 |
Not Signed |
2023-06-15 02:36:24 +0000 UTC |
2023-06-15 02:36:24 +0000 UTC |
ecf814407df1abfecc4a93e83579a1463c33aca6 |
cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936 |
54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1e3bc76525ba81e4e7118d671058905654cac19e6edd50213ec252b56526db0c |
[68a3146b5f0c41860c8c84f4, 68a3146b5f0c41860c8c8530] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\reprlib.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[b3f6d0b4b7085fd925967d507f8aaebf] |
[1baa1965e6507527b405a8e8c18b4d61a8f4c6cb] |
[dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3] |
[32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
reprlib.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
10117 |
b3f6d0b4b7085fd925967d507f8aaebf |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
1baa1965e6507527b405a8e8c18b4d61a8f4c6cb |
dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3 |
32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1e7677f18861b48d241ad124822203b017bd2503bc70ea46bdd133be3c0acad3 |
[68a523a99ba7c92b34976f9d] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Validators.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:43Z] |
[ff4b8004d67dd2a1c2ba1c7e778a0049] |
[81a1ce5f39a72ab8469e75017bf3fa7077f3487b] |
[137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550] |
[ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Validators.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Validators |
13312 |
ff4b8004d67dd2a1c2ba1c7e778a0049 |
Validators |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:16 +0000 UTC |
2023-06-15 02:38:16 +0000 UTC |
81a1ce5f39a72ab8469e75017bf3fa7077f3487b |
137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550 |
ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1f477058702261b995bc18234ff867b47234569c3cd8255454037b74cddd65bc |
[68a5239e621d09b2b1ed5e5d] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SQLiteHelper.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[05c2fabec68ff1d6f465b6934a1a3647] |
[802732afb976e598f0121b892ad0826871e83ab9] |
[204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2] |
[7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
SQLiteHelper.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
AeroScout.MobileView.Common |
10240 |
05c2fabec68ff1d6f465b6934a1a3647 |
AeroScout.MobileView.Common |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:22 +0000 UTC |
2023-06-15 02:37:22 +0000 UTC |
802732afb976e598f0121b892ad0826871e83ab9 |
204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2 |
7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 27bbf833fcaa2960b9ee59bb02f1e331d2bc2cb9f4cca1eda8cbfeafaf4bdcf4 |
[68a1628b267ecd2812a04628, 68a18e5a6551d5c53747f65e, 68a1b6ecbe5c72e648d21629, 68a1e120531e0ca3ba96eb26, 68a20b4fadd40ccee42bde95, 68a2357ef2f54b1728fb0813, 68a2614c3f2e6a5dec3baf18, 68a289e116193e2cd8f24c47, 68a2b41273bf4601c4cc56cd, 68a2de4297bbbb1ebcb6cf61, 68a308710a7b8d912880836c, 68a332ae0313772628837632, 68a35cf18216a1feae2f70c7, 68a3871e9ff2ca2a71809fbd, 68a3b1528c40e2da223cb62b, 68a3db8314b8acff2e9fadaa, 68a405b59388481b8e731cf0, 68a4315b5318f9f79113cba5, 68a45a1544f0d7805650e8bc, 68a4844542b9ebb43736804b, 68a4ae7c8e355abf3b39a7be, 68a4da1b8141e25bf2adffb8, 68a502e63da3e5c1b0f463bb, 68a52e7cfb04c6faf57cc88b, 68a55747ebdf87cb5fee9ae2, 68a582da54a9620183e92742, 68a5aba7b336d276a8e9eab7, 68a5d5e21910cfe0f0de35b8, 68a6016bf4dd6ac2cce6e47e, 68a62a5363df737e3bb9fb3e] |
[2] |
[iatricservice] |
[i-nSam6Test] |
[WVUH] |
[F:\RecycleSSRS\RecycleSSRSWarmup.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2255.853, v2260.859, v2268.865, v2272.867, v2273.867, v2280.871, v2283.876, v2284.877, v2293.885, v2307.897, v2310.898] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:02Z, 2025-08-17T08:00:02Z, 2025-08-17T11:00:02Z, 2025-08-17T14:00:02Z, 2025-08-17T17:00:02Z, 2025-08-17T20:00:02Z, 2025-08-17T23:00:02Z, 2025-08-18T02:00:02Z, 2025-08-18T05:00:01Z, 2025-08-18T08:00:02Z, 2025-08-18T11:00:01Z, 2025-08-18T14:00:02Z, 2025-08-18T17:00:03Z, 2025-08-18T20:00:02Z, 2025-08-18T23:00:02Z, 2025-08-19T02:00:02Z, 2025-08-19T05:00:01Z, 2025-08-19T08:00:02Z, 2025-08-19T11:00:02Z, 2025-08-19T14:00:01Z, 2025-08-19T17:00:03Z, 2025-08-19T20:00:02Z, 2025-08-19T23:00:02Z, 2025-08-20T02:00:01Z, 2025-08-20T05:00:01Z, 2025-08-20T08:00:01Z, 2025-08-20T11:00:01Z, 2025-08-20T14:00:02Z, 2025-08-20T17:00:01Z, 2025-08-20T20:00:09Z] |
[0ec934ef2b8857c6529b162149d8151a] |
[622113c956a7814f286597edbc589c8657d55fb4] |
[531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0] |
[e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f] |
[172.17.252.138] |
[172.17.252.138] |
1 |
Success |
RecycleSSRSWarmup.ps1 |
F:\RecycleSSRS\ |
|
998 |
0ec934ef2b8857c6529b162149d8151a |
|
|
Not Signed |
2022-01-10 19:31:26 +0000 UTC |
2024-03-18 16:06:03 +0000 UTC |
622113c956a7814f286597edbc589c8657d55fb4 |
531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0 |
e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f |
2025-08-08 17:00:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 27e9c1cf191627924c1b5ff9bc0c8f7927779ecacffed7f85d3968f819a72749 |
[68a1e0a88404c6cec2db4a20] |
[2] |
[SYSTEM] |
[I-NCTXSA-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_er4hfvz1.km1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:01:01Z] |
[] |
[] |
[] |
[] |
[172.17.188.22] |
[172.17.188.22] |
1 |
Success |
__PSScriptPolicyTest_er4hfvz1.km1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:01:01 +0000 UTC |
2025-08-17 14:01:01 +0000 UTC |
|
|
|
2025-08-17 14:01:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 282bb98037b6bcd2ce92e9f3f49f31157d927aa087b03b0e43910c9726b1fd9d |
[68a34d6610b57c5bffc57dab] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:28Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 28a6ddc7b83ff25e1c70b0fed71b0ca7654225cc971081844355bc58edf112e5 |
[68a31af24db7fedadb153881] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:22:03Z] |
[6bace707dc12b04a2ca321a88f309f57] |
[58584ffc334e08a10bada624c0466596e38b099c] |
[e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a] |
[5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2198 |
6bace707dc12b04a2ca321a88f309f57 |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-07-30 13:01:59 +0000 UTC |
58584ffc334e08a10bada624c0466596e38b099c |
e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a |
5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379 |
2025-08-18 12:22:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 22201473661fe80882437e0c7debc4ba2c4140860390d21f164b62bcbbf2a7d6 |
[68a5239e621d09b2b1ed5e69] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:41Z] |
[ced1c8a2bd6fba76fdf05a5900e970e5] |
[3f4cc42f538b7584f4ac7582833a836db6136fc8] |
[e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a] |
[d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
SystemManagerData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
SystemManagerApplicationData |
32256 |
ced1c8a2bd6fba76fdf05a5900e970e5 |
SystemManagerApplicationData |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:30 +0000 UTC |
2023-06-15 02:37:30 +0000 UTC |
3f4cc42f538b7584f4ac7582833a836db6136fc8 |
e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a |
d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 22b0f3100973b824e8bb0d1c171a742b29fc8876f6d05cfd2683b3480820c4e2 |
[68a5c8eceb9e7b7716dce205, 68a5ccf2ddfdba423e48863a] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\5560f244-d35c-4531-951d-c286d0f86bc1.ps1, C:\_work_devops_mdi\_temp\79b011f7-d177-464f-ade0-ed0f83404238.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:08:53Z, 2025-08-20T13:22:24Z] |
[9e7c41c8a61927e846853cc41c52d2ad] |
[5cc1d41b8d768427ff9a860f4703f860288ad947] |
[ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0] |
[d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
5560f244-d35c-4531-951d-c286d0f86bc1.ps1 |
C:\_work_devops_mdi\_temp\ |
|
556 |
9e7c41c8a61927e846853cc41c52d2ad |
|
|
Not Signed |
2025-08-20 13:08:53 +0000 UTC |
2025-08-20 13:08:53 +0000 UTC |
5cc1d41b8d768427ff9a860f4703f860288ad947 |
ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0 |
d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 22be3449469641a3b6c5d4f7483dbea6cee9923a6d231814fdcf85d3b0eb8c9c |
[68a3401733e8ca6597dd2da4] |
[2] |
[SYSTEM] |
[DP-Garrett] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w25oryih.dxh.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T15:00:33Z] |
[] |
[] |
[] |
[] |
[172.30.48.2] |
[172.30.48.2] |
1 |
Success |
__PSScriptPolicyTest_w25oryih.dxh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 15:00:33 +0000 UTC |
2025-08-18 15:00:33 +0000 UTC |
|
|
|
2025-08-18 15:00:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 22d76128e43dcda3bf06d4f9d0b0c37120688fba142a594fb6c2855cf92c634d |
[68a162e82a638d4aa3f3a7dd, 68a2b471d463128b1e9bad1b, 68a4061e04f40cbca7b61c8c, 68a557c15db6cbee6e2f08cb] |
[2] |
[svc_sunnuc] |
[NT-SUNCHECK] |
[WVUHS] |
[D:\SNC\Script\imagevwr_clean.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:01Z, 2025-08-18T05:00:01Z, 2025-08-19T05:00:01Z, 2025-08-20T05:00:01Z] |
[e91533b86712d32131a81409f3b031df] |
[beceab015ae24e529a6f8fd1139e8c9a0fd3ed02] |
[bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00] |
[3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d] |
[172.17.36.3] |
[172.17.36.3] |
1 |
Success |
imagevwr_clean.bat |
D:\SNC\Script\ |
|
115 |
e91533b86712d32131a81409f3b031df |
|
|
Not Signed |
2022-03-21 15:11:15 +0000 UTC |
2022-03-21 15:11:46 +0000 UTC |
beceab015ae24e529a6f8fd1139e8c9a0fd3ed02 |
bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00 |
3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d |
2025-08-09 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2308d71301f35c862f39d38bfbefdb09372ea138f938c58875f8f6a84635ecf3 |
[68a243bcea61ab2e604201ef] |
[2] |
[SYSTEM] |
[i-hPRNRemisol] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1mkxt511.2qd.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:03:48Z] |
[] |
[] |
[] |
[] |
[172.17.23.88] |
[172.17.23.88] |
1 |
Success |
__PSScriptPolicyTest_1mkxt511.2qd.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:03:48 +0000 UTC |
2025-08-17 21:03:48 +0000 UTC |
|
|
|
2025-08-17 21:03:56 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2a630e3a0f83a914e2e497a7a90ba1d8cdf2a4eba126318cc394192700fce5d1 |
[68a1ca94eae0fd62a51f5224] |
[2] |
[SYSTEM] |
[CI1BEFS3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_urevov14.ccs.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T12:26:47Z] |
[] |
[] |
[] |
[] |
[172.18.112.86] |
[172.18.112.86] |
1 |
Success |
__PSScriptPolicyTest_urevov14.ccs.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 12:26:47 +0000 UTC |
2025-08-17 12:26:47 +0000 UTC |
|
|
|
2025-08-17 12:27:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2a71f00384903af1b59a3e2e6eec836f8e710ecb30d4ace38eefd70df1259a04 |
[68a156b7b8a9d1158beec7c0] |
[2] |
[SYSTEM] |
[WHL-STOREFRONT1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_i3bblstt.0ux.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:12:24Z] |
[] |
[] |
[] |
[] |
[172.18.112.145] |
[172.18.112.145] |
1 |
Success |
__PSScriptPolicyTest_i3bblstt.0ux.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:12:24 +0000 UTC |
2025-08-17 04:12:24 +0000 UTC |
|
|
|
2025-08-17 04:12:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2a9a5636e4828e6f3bfe77608737599ea956c596c3cbfe3da67e1f219e767035 |
[68a523a99ba7c92b34976f97] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViewModel.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:42Z] |
[29caf1a5cf79c811d9204a9c7b60261e] |
[9922a071d594279b368fdda2c79df68cf19efaf4] |
[a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465] |
[91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
SystemManagerViewModel.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
SystemManagerViewModel |
1076224 |
29caf1a5cf79c811d9204a9c7b60261e |
SystemManagerViewModel |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:32 +0000 UTC |
2023-06-15 02:37:32 +0000 UTC |
9922a071d594279b368fdda2c79df68cf19efaf4 |
a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465 |
91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2a9fef8db4e3a019e32d440cc704ed0b8a15a439567000c15c6f6570c9096783 |
[68a5239e621d09b2b1ed5e52] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackSchema_icd.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:36Z] |
[6a9ba4094531a25a391fa577c7c6c08b] |
[b0879b11bc79c994c3083b9a2e5c646465c0b075] |
[6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308] |
[af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PlaybackSchema_icd.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
74240 |
6a9ba4094531a25a391fa577c7c6c08b |
|
1.0.8565.40719 |
Not Signed |
2023-06-15 02:37:20 +0000 UTC |
2023-06-15 02:37:20 +0000 UTC |
b0879b11bc79c994c3083b9a2e5c646465c0b075 |
6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308 |
af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2ad327190254cfabf1ce372b9eb3080fde80527f9afb95609744c84b069f01af |
[68a48674c4cb2500be692641] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.BedClient.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:51Z] |
[53bb6bf6e10f31058b313d251d35a3ee] |
[bd121b21353174db9fbf449b13da23abf6841825] |
[00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73] |
[c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Clinical.BedClient.dll |
C:\Stryker\iBed Server Application\Stryker.Clinical\ |
Stryker.iBedServer.Clinical.BedClient |
12800 |
53bb6bf6e10f31058b313d251d35a3ee |
Stryker.iBedServer.Clinical.BedClient |
1.0.0 |
Not Signed |
2023-03-16 10:22:28 +0000 UTC |
2023-03-16 10:22:28 +0000 UTC |
bd121b21353174db9fbf449b13da23abf6841825 |
00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73 |
c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631 |
2025-07-15 14:08:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2ad4cc623a5619920ce1d4ce674a6cb47b5706f757e0dbccd2c89616e626900c |
[68a3165f22b7418ee6d4590f] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cm32l4nf.gxu.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:02:31Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_cm32l4nf.gxu.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:02:31 +0000 UTC |
2025-08-18 12:02:31 +0000 UTC |
|
|
|
2025-08-18 12:02:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2b13145185c874dede90e8f4656daa3b60d93459e476545dbad90746d750c458 |
[68a4698d5445b9aa205794eb] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_0e99f74a14614d68b1464e32cd41867d.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:09:46Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_0e99f74a14614d68b1464e32cd41867d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:09:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2b531f26102d0687325387dac16e037621852063de02203aa4674e01d589374a |
[68a19be542f4bad561883042] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dr1aymbt.j23.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:07:42Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_dr1aymbt.j23.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:07:42 +0000 UTC |
2025-08-17 09:07:42 +0000 UTC |
|
|
|
2025-08-17 09:07:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2539cd16bb06022c2a25860732b37be246b51dc74e2b6b991d06594d04b705b0 |
[68a3146b5f0c41860c8c84f8, 68a3146b5f0c41860c8c8539] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\collections\__pycache__\abc.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[cc29eb47fb461ae6f3b5406ff37c01ae] |
[36b89b966daf9b3254160799ea992b61d85e7c15] |
[f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177] |
[a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
abc.cpython-313.pyc |
C:\Program Files\Python\Lib\collections\__pycache__\ |
|
253 |
cc29eb47fb461ae6f3b5406ff37c01ae |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
36b89b966daf9b3254160799ea992b61d85e7c15 |
f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177 |
a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 254f47a4a8697b42051ab2cd2b081a76c48204bd8a57ac9527ac623733119c7d |
[68a1e71b93264a29fd1ee60a] |
[2] |
[SYSTEM] |
[i-nSwisslog] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xw0tqpga.deh.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:28:31Z] |
[] |
[] |
[] |
[] |
[172.17.253.93] |
[172.17.253.93] |
1 |
Success |
__PSScriptPolicyTest_xw0tqpga.deh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:28:31 +0000 UTC |
2025-08-17 14:28:31 +0000 UTC |
|
|
|
2025-08-17 14:28:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 25a1d161a927d2f4137696882e75cbfba197acf96590c7062a3fb31383548698 |
[68a1830c2dc56a47504409e0] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3gsdtrcc.e1e.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:21:44Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_3gsdtrcc.e1e.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:21:44 +0000 UTC |
2025-08-17 07:21:44 +0000 UTC |
|
|
|
2025-08-17 07:21:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 270aff5383a4742b7159a21eeb3bc8c3620478cb561e6db80510f187e3ab50d6 |
[68a246eb395eca2c3f17fa04] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zfqr5yrd.w2r.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:17:27Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_zfqr5yrd.w2r.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:17:27 +0000 UTC |
2025-08-17 21:17:27 +0000 UTC |
|
|
|
2025-08-17 21:17:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 270d051fc9cbb8cb66497b8dea30b5008c9ae9ffb0e15f79c4e7cb490f8abdca |
[68a25f08a862a9b86d2b3e0d] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_mi1gobfg.pks.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:13Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_mi1gobfg.pks.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 23:00:13 +0000 UTC |
2025-08-17 23:00:13 +0000 UTC |
|
|
|
2025-08-17 23:00:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2c73f99ad12864d0c9b8f810de30c8ac9d3b89b9129169865c5c3837c7a6856c |
[68a18f0549fba6e1a58ed5a8, 68a2e08b03d8e95044c937d3, 68a432305af3ecc3cb0504f6, 68a585326688127c061e72f3] |
[2] |
[svc_Iatric] |
[i-nSamDB1] |
[WVUHS] |
[D:\Program Files (x86)\CoreFTP\SunquestRH.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:10:00Z, 2025-08-18T08:10:00Z, 2025-08-19T08:10:00Z, 2025-08-20T08:10:00Z] |
[a930976021610a665899490be2be6e36] |
[007eda380db0425df9a36638bfdf85e77c259ae1] |
[3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532] |
[68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be] |
[172.17.21.136] |
[172.17.21.136] |
1 |
Success |
SunquestRH.bat |
D:\Program Files (x86)\CoreFTP\ |
|
511 |
a930976021610a665899490be2be6e36 |
|
|
Not Signed |
2023-11-01 13:02:24 +0000 UTC |
2023-11-01 13:05:15 +0000 UTC |
007eda380db0425df9a36638bfdf85e77c259ae1 |
3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532 |
68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be |
2025-08-09 08:10:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2e04fd3951fbb534d097ed620d224eb5876826669ab7d633fda596e061b7a985 |
[68a52f3a711130a12eb554ea] |
[2] |
[SYSTEM] |
[u-v3mWebTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm4pscpp.fzz.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T02:13:10Z] |
[] |
[] |
[] |
[] |
[172.25.19.83] |
[172.25.19.83] |
1 |
Success |
__PSScriptPolicyTest_mm4pscpp.fzz.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 02:13:10 +0000 UTC |
2025-08-20 02:13:10 +0000 UTC |
|
|
|
2025-08-20 02:13:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2e24f5990f0ba6248fa08bf4d4782db2aad9974e518c0e1e233efa92494be937 |
[68a50f31981abdebabc95a70] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ek2lcwm3.ikq.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T23:56:21Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_ek2lcwm3.ikq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 23:56:21 +0000 UTC |
2025-08-19 23:56:21 +0000 UTC |
|
|
|
2025-08-19 23:56:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2942b263d56edddcb66177748a35f7be115f1afd60e80fa55f0ee09629494d15 |
[68a3146b5f0c41860c8c850a, 68a3146b5f0c41860c8c855d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\ipaddress.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[2c3b87b89037f45d258d52a25767f1b0] |
[550d2ad97228d271783e4378c7541b6800f11e9c] |
[76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85] |
[5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
ipaddress.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
91036 |
2c3b87b89037f45d258d52a25767f1b0 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
550d2ad97228d271783e4378c7541b6800f11e9c |
76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85 |
5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 297d493d5e5cb60eb0efb9655c35018b6deb10e9cafe24a8e83065ea6531237b |
[68a345f4e4355f704785fb54] |
[2] |
[SYSTEM] |
[u-nsdprodconn1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l5fz4t12.5ye.ps1] |
[Servers] |
[Servers Audit] |
[v2258.856] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T15:25:35Z] |
[] |
[] |
[] |
[] |
[172.25.23.179] |
[172.25.23.179] |
1 |
Success |
__PSScriptPolicyTest_l5fz4t12.5ye.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 15:25:35 +0000 UTC |
2025-08-18 15:25:35 +0000 UTC |
|
|
|
2025-08-18 15:25:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 29877ebec7f64ecd376dea7bc916b4547ac036f84ab40e78edde56b014708a34 |
[68a241001a4f473f56688bb2] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t4ptnebx.hz2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:52:03Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_t4ptnebx.hz2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:52:03 +0000 UTC |
2025-08-17 20:52:03 +0000 UTC |
|
|
|
2025-08-17 20:52:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 30dbaca4c387bc212e326f653c535f315e111997840af61c4cceaafc2c2b7b6e |
[68a18d08c761638e1c82e3dc, 68a2dfdc19028bf24d272e37, 68a4315aac209890fd02860e, 68a581c7ea8ad1c4ecc342b9] |
[2] |
[hyperwebsvc] |
[I-NCTXEHH-001] |
[WVUHS] |
[C:\HomeHealth\__SCRIPT REF Files\REFEpicHHEnvPLY_ACE3_Refresh.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z] |
[fe11a07acc95a9d0efd502c6c79f11ea] |
[d2d2aa489d4f51c3d533906b9f1adcde16ae28b0] |
[d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b] |
[74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
REFEpicHHEnvPLY_ACE3_Refresh.bat |
C:\HomeHealth\__SCRIPT REF Files\ |
|
588 |
fe11a07acc95a9d0efd502c6c79f11ea |
|
|
Not Signed |
2023-04-26 14:42:09 +0000 UTC |
2025-04-17 14:45:25 +0000 UTC |
d2d2aa489d4f51c3d533906b9f1adcde16ae28b0 |
d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b |
74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe |
2025-08-09 08:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 30f6420e30c14493561c208144082198b6ef8921d5584e99ce925a2859ccbf4c |
[68a311cdc2d0d6e3eb77f20b] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindPasswordLastSet.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[305adcf21d1608c85d2bad7b2ee17f27] |
[e3ef3170c8936e8e00b1e0bd20050c116cba3dc3] |
[4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200] |
[6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
FindPasswordLastSet.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
3800 |
305adcf21d1608c85d2bad7b2ee17f27 |
|
|
Not Signed |
2021-11-18 18:17:20 +0000 UTC |
2025-06-05 20:58:32 +0000 UTC |
e3ef3170c8936e8e00b1e0bd20050c116cba3dc3 |
4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200 |
6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3129528d911f66c7bb4157add40fd6f5e831069ce89676d412d7a3f781baf5d4 |
[68a194b6a53d5390bd32653e] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wbyd23ye.0vk.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:37:02Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_wbyd23ye.0vk.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:37:02 +0000 UTC |
2025-08-17 08:37:02 +0000 UTC |
|
|
|
2025-08-17 08:37:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 31617bc6d788d17e9d6b4e157c61ff4f5aa99ff6dd12390aaec350e1dad59cfd |
[68a1abd81464ade8cebc30df] |
[2] |
[SYSTEM] |
[i-nctxddc-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jpj1pwcu.2im.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:15:40Z] |
[] |
[] |
[] |
[] |
[172.17.146.23] |
[172.17.146.23] |
1 |
Success |
__PSScriptPolicyTest_jpj1pwcu.2im.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:15:40 +0000 UTC |
2025-08-17 10:15:40 +0000 UTC |
|
|
|
2025-08-17 10:15:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3183ca151646505652e1fc5a9b93bc995d5e96e9edb292db6b3b408675579dcb |
[68a4ccc785b914a60d739e52, 68a4ce1fc826337212f53bef, 68a4d07753a851daf11e693a, 68a4d07753a851daf11e6950, 68a4d2d1ff2b441b84428132, 68a4d2d1ff2b441b84428148] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\Process.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[d2f5da45fcdf1a8df76585382af60f4d] |
[8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e] |
[3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad] |
[813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Process.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\ |
|
22528 |
d2f5da45fcdf1a8df76585382af60f4d |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:12:50 +0000 UTC |
8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e |
3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad |
813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 318d814bff375eefc6e29af2e0c2de1b068f1446506cc5f35016243e3a35300f |
[68a1ab83995f21981882f87f, 68a2fd0889defb6e59ac74ce, 68a44ea8ec4473d55579feaa, 68a5a03ec841a3410bc8c339] |
[2] |
[hyperwebsvc] |
[I-NCTXEHH-001] |
[WVUHS] |
[C:\HomeHealth\EpicHHEnvSUP_SmartUpdate.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T10:06:06Z, 2025-08-18T10:06:06Z, 2025-08-19T10:06:06Z, 2025-08-20T10:06:06Z] |
[8594a55773a5d5e9c9180136966b5739] |
[596dbf0a2adc99c52a2c70c81b17d94db0c605e0] |
[35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc] |
[7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
EpicHHEnvSUP_SmartUpdate.bat |
C:\HomeHealth\ |
|
94 |
8594a55773a5d5e9c9180136966b5739 |
|
|
Not Signed |
2023-04-26 14:42:09 +0000 UTC |
2025-04-17 14:46:58 +0000 UTC |
596dbf0a2adc99c52a2c70c81b17d94db0c605e0 |
35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc |
7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8 |
2025-08-09 10:06:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3196423864811fbe22bf53f80cc68526cf48ea70190a212e4cc48db649034591 |
[68a50ddd41a24e74bb2aa5d2] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\NellcorPuritanBennettB_5_0_3_6.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[Not Signed] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:50:47Z] |
[a95a1bbcab7cae689156d805a65bdd9e] |
[b55cf6fa2977d2fc1917b131c20390b3c1f26613] |
[66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f] |
[ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
NellcorPuritanBennettB_5_0_3_6.msi |
C:\Users\CA_gs10109\Downloads\ |
|
832000 |
a95a1bbcab7cae689156d805a65bdd9e |
|
|
Not Signed |
2025-08-19 23:50:41 +0000 UTC |
2025-08-19 23:50:42 +0000 UTC |
b55cf6fa2977d2fc1917b131c20390b3c1f26613 |
66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f |
ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220 |
2025-08-19 23:50:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 31ace35747ecced749c928084db3f90c66e95bd9602971bb5ceef131a953689f |
[68a389627bcaf39ed5409b94] |
[2] |
[ellisonmea] |
[i-hvmigration3] |
[WVUHS] |
[C:\Scripts\Onedriveownership.ps1] |
[Servers] |
[Servers Audit] |
[v2269.866] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T20:13:13Z] |
[9aae1bdf85a8905cf2d96a5f8ef25933] |
[3065aa4cbf9f3a2341c95212ea1891817294a142] |
[c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e] |
[9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16] |
[172.17.23.32] |
[172.17.23.32] |
1 |
Success |
Onedriveownership.ps1 |
C:\Scripts\ |
|
910 |
9aae1bdf85a8905cf2d96a5f8ef25933 |
|
|
Not Signed |
2025-04-08 20:39:11 +0000 UTC |
2025-04-08 20:39:11 +0000 UTC |
3065aa4cbf9f3a2341c95212ea1891817294a142 |
c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e |
9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16 |
2025-08-18 20:13:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 31b5da4436dcda99daa9b4d389df222f22f4709159f9165c955fe24fd5323762 |
[68a3146b5f0c41860c8c8556, 68a3146b5f0c41860c8c857a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\ast.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[d5f2228dec6e8dc3cbdc9862ec1605cd] |
[79342d19808ee815e433f96728b0e4d3ff1e5c29] |
[86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06] |
[868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
ast.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
102841 |
d5f2228dec6e8dc3cbdc9862ec1605cd |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
79342d19808ee815e433f96728b0e4d3ff1e5c29 |
86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06 |
868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 321acf2e7ad2071fa443468fce5535f6614be43029bd05b5c38e86e0ef393a11 |
[68a4b0fb13fac5171eeef0d8] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.DTO.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:08Z] |
[71da969b9025ad135aef8a5a5df701be] |
[e0a0af76470e1bfe566cf15d4590c4401e6bac98] |
[cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408] |
[c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.Pegasus.DTO.dll |
C:\Program Files (x86)\Cyrun\ADS - 17978\ |
|
740352 |
71da969b9025ad135aef8a5a5df701be |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 08:50:00 +0000 UTC |
2025-05-22 18:17:49 +0000 UTC |
e0a0af76470e1bfe566cf15d4590c4401e6bac98 |
cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408 |
c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5 |
2025-05-22 18:47:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2bee0e09b0add0c35eda78f7379069960dac061c4e215792c32e6afe3414f579 |
[68a5d382bd3935126ed513eb] |
[2] |
[CA_Jnt_SVA12] |
[I-CA-PSM] |
[WVUHS] |
[C:\Users\CA_Jnt_SVA12\Desktop\GatewayWindowsDefenderATPOnboardingPackage\WindowsDefenderATPLocalOnboardingScript.cmd] |
[Servers] |
[Servers Audit] |
[v2293.885] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T13:54:00Z] |
[f50eda75d10c6f119c6cd40966efea67] |
[0c73d106cbfa403bf59db7d87ff1ea8314baac1d] |
[6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33] |
[282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0] |
[172.17.252.63] |
[172.17.252.63] |
1 |
Success |
WindowsDefenderATPLocalOnboardingScript.cmd |
C:\Users\CA_Jnt_SVA9\Desktop\GatewayWindowsDefenderATPOnboardingPackage\ |
|
17354 |
f50eda75d10c6f119c6cd40966efea67 |
|
|
Not Signed |
2024-10-17 00:26:56 +0000 UTC |
2025-03-24 19:48:16 +0000 UTC |
0c73d106cbfa403bf59db7d87ff1ea8314baac1d |
6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33 |
282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0 |
2025-03-24 19:52:38 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 32ddd6f42f62b47cab7ac4493310b7cf3203726c13615f7f57e289fc623fedd0 |
[68a48674c4cb2500be69263f] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Data.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:51Z] |
[2ab8001eba88698a847e929579af07ac] |
[d5b67246ce5168b6e967a0b52138ff0cae92f784] |
[f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7] |
[9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Clinical.Data.dll |
C:\Stryker\iBed Server Application\Stryker.Clinical\ |
Stryker.iBedServer.Clinical.Data |
5632 |
2ab8001eba88698a847e929579af07ac |
Stryker.iBedServer.Clinical.Data |
1.0.0 |
Not Signed |
2023-03-16 10:22:28 +0000 UTC |
2023-03-16 10:22:28 +0000 UTC |
d5b67246ce5168b6e967a0b52138ff0cae92f784 |
f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7 |
9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479 |
2025-07-15 14:08:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 346ccc90937cdf654b3d5f9ac9c7809c033d6eddb18e9bd2e22f6b423dd54df3 |
[68a19cd53b5aad0f9d7b2018] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_do1v2xwp.v3q.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:11:40Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_do1v2xwp.v3q.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:11:40 +0000 UTC |
2025-08-17 09:11:40 +0000 UTC |
|
|
|
2025-08-17 09:11:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 34ed77bd9b38d618a2ce47893a58840cb425e0a575f531fa6a9e86af4af738c2 |
[68a4864ff17c458cfe4c9f0b] |
[2] |
[SYSTEM] |
[i-niBedV_Prod] |
[NT AUTHORITY] |
[C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe] |
[Servers] |
[Servers Audit] |
[v2273] |
["C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-19T14:02:35Z] |
[e8b2a9bad33ebe53ffc666fc129e0697] |
[c85a5eabbb0ae0cd9d748394f38b8b58a77723b8] |
[415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b] |
[9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33] |
[172.17.252.225] |
[172.17.252.225] |
1 |
Success |
Stryker.Vision.WhiteboardApi.exe |
C:\Stryker\Stryker Vision\WhiteboardApi\ |
Stryker.Vision.WhiteboardApi |
140800 |
e8b2a9bad33ebe53ffc666fc129e0697 |
Stryker.Vision.WhiteboardApi |
1.1.0 |
Not Signed |
2024-10-22 11:41:12 +0000 UTC |
2024-10-22 11:41:12 +0000 UTC |
c85a5eabbb0ae0cd9d748394f38b8b58a77723b8 |
415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b |
9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33 |
2025-05-20 14:56:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 35318a9ab7f60d956cd28206294996eff20bd8bf818a962b29b6c9f61407e40f |
[68a1abb04b15d6efe3e372b4] |
[2] |
[SYSTEM] |
[i-nctx-pvs4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1nabrctk.jfe.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:15:03Z] |
[] |
[] |
[] |
[] |
[172.17.246.6] |
[172.17.246.6] |
1 |
Success |
__PSScriptPolicyTest_1nabrctk.jfe.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:15:03 +0000 UTC |
2025-08-17 10:15:03 +0000 UTC |
|
|
|
2025-08-17 10:15:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3554782b0252734754cb8fc6c12b1f6561ae7b70d0158ce40cfe36f9f7bcba5c |
[68a31df4554d4b0dc35a15ad] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:34:58Z] |
[c85702cbbe5bef4fbdffdd797532d073] |
[8dcf05881e2b6cb1764d87d63a94201380891187] |
[5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a] |
[d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2199 |
c85702cbbe5bef4fbdffdd797532d073 |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 12:34:57 +0000 UTC |
8dcf05881e2b6cb1764d87d63a94201380891187 |
5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a |
d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a |
2025-08-18 12:35:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 301cf50872c1e5c8b34b970892ba731a492642a1afee8c89cc1de5411b3a099a |
[68a62a95414ce37e5511e739] |
[2] |
[NETWORK SERVICE] |
[u-NFP2] |
[NT AUTHORITY] |
[C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe] |
[Servers] |
[Servers Audit] |
[v2310.898] |
["C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T20:05:34Z] |
[4b09a5c54dd9c4160a0153c47e6b6b5d] |
[f2a30745b256ff1540a76e75cf58aad763febdc8] |
[e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956] |
[ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45] |
[172.25.17.195] |
[172.25.17.195] |
1 |
Success |
IPDataListenerService.exe |
C:\Program Files (x86)\FormFast\IPDataListenerService\ |
FormFast.FastPrint.IPDataListener |
25088 |
4b09a5c54dd9c4160a0153c47e6b6b5d |
FormFast.FastPrint.IPDataListener |
23.6.0.20130 |
Not Signed |
2023-06-20 18:20:04 +0000 UTC |
2023-06-20 18:20:04 +0000 UTC |
f2a30745b256ff1540a76e75cf58aad763febdc8 |
e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956 |
ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45 |
2025-08-20 20:05:41 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 30637f470d50f8e4e55ca6bf69130a74b83e9b51f757d487a2c076ed7397eaa9 |
[68a1781303efa29c2490c53e] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_por1serl.ypl.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:34:54Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_por1serl.ypl.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:34:54 +0000 UTC |
2025-08-17 06:34:54 +0000 UTC |
|
|
|
2025-08-17 06:34:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 10d3b4be55b51cd7d75db7a6179ea005060ad250fc67f908a2515511e97f6283 |
[68a18f8e881670216ff01e17] |
[2] |
[SYSTEM] |
[u-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n4vkfj3n.1xw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:15:02Z] |
[] |
[] |
[] |
[] |
[172.25.10.9] |
[172.25.10.9] |
1 |
Success |
__PSScriptPolicyTest_n4vkfj3n.1xw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:15:02 +0000 UTC |
2025-08-17 08:15:02 +0000 UTC |
|
|
|
2025-08-17 08:15:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 378451dd833761309947110ca8079fa3b6c1ad60a87feb1c235c423640d82be7 |
[68a23709d838072c28f2c580] |
[2] |
[SYSTEM] |
[u-nUHCPaging] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uuh0mg2w.eid.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:09:32Z] |
[] |
[] |
[] |
[] |
[172.25.22.57] |
[172.25.22.57] |
1 |
Success |
__PSScriptPolicyTest_uuh0mg2w.eid.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:09:32 +0000 UTC |
2025-08-17 20:09:32 +0000 UTC |
|
|
|
2025-08-17 20:09:45 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 37b56e0bca875191ee27659359aecd65ee5e5833e6bc19b044442533ce78bff2 |
[68a48674c4cb2500be692645] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Entities.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:54Z] |
[115d4be1403b934451bb9297167cb005] |
[4252f6cecd12bc6bc9da84e1180aabd9f0dfe591] |
[fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8] |
[729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Clinical.Entities.dll |
C:\Stryker\iBed Server Application\Stryker.Clinical\ |
Stryker.iBedServer.Clinical.Entities |
23040 |
115d4be1403b934451bb9297167cb005 |
Stryker.iBedServer.Clinical.Entities |
1.0.0 |
Not Signed |
2023-03-16 10:22:28 +0000 UTC |
2023-03-16 10:22:28 +0000 UTC |
4252f6cecd12bc6bc9da84e1180aabd9f0dfe591 |
fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8 |
729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895 |
2025-07-15 14:08:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 37f8f5baccac320025e4005fff81ee9450f58762f2482b2d8124aa926fd8e0d2 |
[68a51fae0e8ba9c7b816e25c] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_msc5vhgd.1kv.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T01:06:44Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_msc5vhgd.1kv.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 01:06:44 +0000 UTC |
2025-08-20 01:06:44 +0000 UTC |
|
|
|
2025-08-20 01:06:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 382316c0afc6d7d32fee0b4c79c925a641feceaa99a2d6eb0ad98837cfca0098 |
[68a16162e584c22c75f72ecb] |
[2] |
[SYSTEM] |
[u-v3MIntGTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vowrvir1.zyf.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:58:03Z] |
[] |
[] |
[] |
[] |
[172.25.19.86] |
[172.25.19.86] |
1 |
Success |
__PSScriptPolicyTest_vowrvir1.zyf.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:58:03 +0000 UTC |
2025-08-17 04:58:03 +0000 UTC |
|
|
|
2025-08-17 04:58:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 322b2b5c4044e2657eb4e703d336eac4e2cf0f8ba8fa111c62d0474eb76db2a9 |
[68a4ccc785b914a60d739e44, 68a4ce1fc826337212f53be4, 68a4d07753a851daf11e692e, 68a4d07753a851daf11e6941, 68a4d2d1ff2b441b84428126, 68a4d2d1ff2b441b84428139] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setroot.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] |
[d3087075a6dd224443a1f6aac8e03744] |
[78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5] |
[e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579] |
[fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot.cmd |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\ |
|
937 |
d3087075a6dd224443a1f6aac8e03744 |
|
|
Not Signed |
2021-10-20 13:41:06 +0000 UTC |
2016-12-02 07:18:54 +0000 UTC |
78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5 |
e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579 |
fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 326b621474786c3a956a35665f74162d6368f683f36a3279c8ba87ff4db0c088 |
[68a26ec274eb3d0bf454e3f7, 68a26ec274eb3d0bf454e3f8, 68a3dc7b3a4d559703d13f32, 68a3dc7b3a4d559703d13f33, 68a54a317a345dcf1b41bfa9, 68a54a317a345dcf1b41bfaa, 68a54a317a345dcf1b41bfab] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-17T23:59:47Z, 2025-08-17T23:59:50Z, 2025-08-19T02:00:28Z, 2025-08-19T02:00:30Z, 2025-08-20T04:00:28Z, 2025-08-20T04:00:30Z, 2025-08-20T04:00:31Z] |
[5fbdd10ee7659f1aee5335bd7e198fb9] |
[c20c64d0f39da127033b6d188e35ec7ff4223707] |
[09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd] |
[56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
Microsoft.PowerShell_profile.ps1 |
C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
86 |
5fbdd10ee7659f1aee5335bd7e198fb9 |
|
|
Not Signed |
2018-07-30 20:39:44 +0000 UTC |
2018-07-30 20:39:44 +0000 UTC |
c20c64d0f39da127033b6d188e35ec7ff4223707 |
09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd |
56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb |
2025-08-09 08:03:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 35831e10050275f4a36fb93aa4db13d2edf34749154ef4636a29477d9f30c565 |
[68a4ccc785b914a60d739e43, 68a4ce1fc826337212f53be3, 68a4d07753a851daf11e692d, 68a4d07753a851daf11e6940, 68a4d2d1ff2b441b84428125, 68a4d2d1ff2b441b84428138] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[D:\Qdx_work\custom_scripts\CloverleafInterfaceRecycle.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] |
[829df969d661e3a13c15827ed7d696a3] |
[b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b] |
[d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91] |
[95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
CloverleafInterfaceRecycle.cmd |
D:\Qdx_work\custom_scripts\ |
|
1212 |
829df969d661e3a13c15827ed7d696a3 |
|
|
Not Signed |
2020-03-23 18:22:50 +0000 UTC |
2020-03-23 18:22:50 +0000 UTC |
b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b |
d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91 |
95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 36490d3c9471838f3c20f0d365fb262e57a7b0a20eee7edd0b4e4cff4df5a381 |
[68a1e0bc5a612562ec7682af] |
[2] |
[SYSTEM] |
[I-NCTXSA-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_diuxbi12.wl4.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:01:20Z] |
[] |
[] |
[] |
[] |
[172.17.188.22] |
[172.17.188.22] |
1 |
Success |
__PSScriptPolicyTest_diuxbi12.wl4.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:01:20 +0000 UTC |
2025-08-17 14:01:20 +0000 UTC |
|
|
|
2025-08-17 14:01:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3691c63ee84b2628e0c021418d0dee979b50ce550178db3efc5e19fe5bad5b4c |
[68a472cff502bbc3c30ebf3e, 68a474e54bf464a98201b8d0, 68a474e54bf464a98201b8d2] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\SuperPutty\log4net.dll] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\SuperPutty\SuperPutty.exe] |
[C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T12:49:17Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z] |
[f69c36bbf1220bdd2a114f4abc6b0fc1] |
[d0bb80306ce3dc12cc0c893e28fef27d721c1b7e] |
[9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f] |
[6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
log4net.dll |
C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\ |
Apache log4net for .NET Framework 2.0 |
311296 |
f69c36bbf1220bdd2a114f4abc6b0fc1 |
log4net |
1.2 |
Not Signed |
2018-10-23 18:59:50 +0000 UTC |
2024-04-16 15:29:39 +0000 UTC |
d0bb80306ce3dc12cc0c893e28fef27d721c1b7e |
9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f |
6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633 |
2025-03-28 16:06:36 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 154aa488e0abd508880818e2049df9c1c2cbaca6669dfa5bd5a69dd6e007c0e8 |
[68a4ccd13efa8341e1766c87, 68a4d07753a851daf11e694a, 68a4d2d1ff2b441b84428140] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcienginerun.bat] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:11Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:11Z] |
[e0dddf23a7f7275657349542c5a78a26] |
[c31d3a860abf2ff1f28233268f1267acb4399351] |
[9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd] |
[a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
hcienginerun.bat |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ |
|
135 |
e0dddf23a7f7275657349542c5a78a26 |
|
|
Not Signed |
2021-10-20 13:42:29 +0000 UTC |
2021-10-20 13:42:29 +0000 UTC |
c31d3a860abf2ff1f28233268f1267acb4399351 |
9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd |
a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd |
2025-08-19 19:13:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 15e55b7cc63532d4cab6dbff900c648ae8606b33cea00b22ed88f71bbfeb192e |
[68a5cd8dca130478244c7a07] |
[2] |
[SYSTEM] |
[vm-talisint] |
[NT AUTHORITY] |
[C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe] |
[Servers] |
[Servers Audit] |
[v2287.880] |
["C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T13:24:13Z] |
[d3e1b261bff7f95d7bc1d8188b9f99bf] |
[91e0d15152db9868e6fd7f89305b43da341048ee] |
[6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652] |
[f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2] |
[172.17.252.192] |
[172.17.252.192] |
1 |
Success |
HL7TCPIPInbound.exe |
C:\TalisClinical\Applications\HL7TCPIPInbound\ADT01_Service\ |
Talis Clinical ACG HL7 TCP/IP Inbound Service |
46592 |
d3e1b261bff7f95d7bc1d8188b9f99bf |
HL7TCPIPInbound |
2.0.0.1 |
Not Signed |
2019-12-20 19:58:05 +0000 UTC |
2018-02-19 21:25:50 +0000 UTC |
91e0d15152db9868e6fd7f89305b43da341048ee |
6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652 |
f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2 |
2025-04-28 02:12:26 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 160cfc3154da71d4c8ed0e7c4dd19174f32559494376e201ed965cefd9dc435d |
[68a4ccc785b914a60d739e50, 68a4ce1fc826337212f53bed, 68a4d07753a851daf11e6938, 68a4d07753a851daf11e694e, 68a4d2d1ff2b441b84428130, 68a4d2d1ff2b441b84428146] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\Socket.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[ee721e727ce3d694cd3c11559b0b0401] |
[ec40590cc3d3c54522340b50199a2eaff31c991a] |
[576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799] |
[6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Socket.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\ |
|
26624 |
ee721e727ce3d694cd3c11559b0b0401 |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:44 +0000 UTC |
ec40590cc3d3c54522340b50199a2eaff31c991a |
576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799 |
6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 170d4b7c2de7fb1c9deb285fdeff1310fcb485e918c7d9aa2a2ae1ec916ff314 |
[68a3146b5f0c41860c8c84f5, 68a3146b5f0c41860c8c854e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\heapq.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[3b625d3d2635c2e9ea41265880245e3b] |
[6ee317e222aef1f732a799eca5285b2f3fe532b6] |
[7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8] |
[d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
heapq.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
17762 |
3b625d3d2635c2e9ea41265880245e3b |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
6ee317e222aef1f732a799eca5285b2f3fe532b6 |
7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8 |
d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 100ba8a777f29c39bd511d182240d5779f2ec78d48b344c0b32c4af550ab6242 |
[68a3b085a65533c1207e5252] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_trmfp0jd.et3.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-18T23:00:14Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_trmfp0jd.et3.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 23:00:14 +0000 UTC |
2025-08-18 23:00:14 +0000 UTC |
|
|
|
2025-08-18 23:00:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 10b8dc8870d330bca8e2f7ab2a3f366dc0e951964fdaa02fb79a0de8526201b3 |
[68a3146b5f0c41860c8c84fd, 68a3146b5f0c41860c8c8548] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\weakref.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[672f5710a5c0e63a57e702f409ba87b5] |
[2c39e50335cb8cfb27988e48cf545ab17dbd2599] |
[97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342] |
[40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
weakref.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
31805 |
672f5710a5c0e63a57e702f409ba87b5 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
2c39e50335cb8cfb27988e48cf545ab17dbd2599 |
97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342 |
40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4050bae7cd6a7c189962cc5b8c79f8c21cb51a602b7059580ed2639dfc3e4b6c |
[68a25f08a862a9b86d2b3e0e] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\cm4vi1nn.dll] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:14Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
cm4vi1nn.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-17 23:00:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 38658fc457cb062f25a6d2cc2d3f4f09c2b6124808493dcc3d4cd0c1f83693fe |
[68a5bdfb54e99efcaf1f8dba] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\tmpEXO_zeon5nwa.typ.psm1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:22:14Z] |
[9d8a18d3a880992b126f3dd17953b974] |
[6bb542e32d192bbae6733b08f789135c8ec45195] |
[074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800] |
[c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_zeon5nwa.typ.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\ |
|
2317071 |
9d8a18d3a880992b126f3dd17953b974 |
|
|
Not Signed |
2025-08-20 12:22:13 +0000 UTC |
2025-08-20 12:22:13 +0000 UTC |
6bb542e32d192bbae6733b08f789135c8ec45195 |
074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800 |
c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672 |
2025-08-20 12:22:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 386fb9fefc2fb12d818524ec24b17da4af6f60f65ab46d19559debde3b35d34a |
[68a3187c68080fcb17789d1a] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikmcgc3u.bvf.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:11:38Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_ikmcgc3u.bvf.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:11:38 +0000 UTC |
2025-08-18 12:11:38 +0000 UTC |
|
|
|
2025-08-18 12:11:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 387c409da5f22f77cc7fbb0573725479735b7be82d5222adf27f95c32d216f83 |
[68a33f79adaf7aae4bae834a] |
[2] |
[CA_Jnt_NVR2] |
[I-NNVRMANAGE] |
[WVUHS] |
[C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\__PSScriptPolicyTest_bcrnu3px.2x4.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T14:57:57Z] |
[] |
[] |
[] |
[] |
[172.17.250.210] |
[172.17.250.210] |
1 |
Success |
__PSScriptPolicyTest_bcrnu3px.2x4.ps1 |
C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\ |
|
82 |
|
|
|
Not Signed |
2025-08-18 14:57:56 +0000 UTC |
2025-08-18 14:57:56 +0000 UTC |
|
|
|
2025-08-18 14:58:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 38e07a6cfe8521a9bb62ef936912ec9893b76764259e17981c2a5ac93141cfb4 |
[68a311cdc2d0d6e3eb77f20c] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindADObjectFromSID.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[70ba383b483595c149fabc6fd71ebb84] |
[e7399b87d114d31ba0b5f7ac26958144347857f5] |
[94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c] |
[4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
FindADObjectFromSID.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
277 |
70ba383b483595c149fabc6fd71ebb84 |
|
|
Not Signed |
2021-11-18 18:17:20 +0000 UTC |
2024-09-27 21:01:33 +0000 UTC |
e7399b87d114d31ba0b5f7ac26958144347857f5 |
94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c |
4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 38f61b0d050e3e36ff68ea1ed7a8dbeedbcb041e12ac3143dd62b76583f337f0 |
[68a22d269d187f48e0f4adf9] |
[2] |
[SYSTEM] |
[DP-Fairmont] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tsuxgn5g.ban.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:27:28Z] |
[] |
[] |
[] |
[] |
[172.16.121.132] |
[172.16.121.132] |
1 |
Success |
__PSScriptPolicyTest_tsuxgn5g.ban.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:27:28 +0000 UTC |
2025-08-17 19:27:28 +0000 UTC |
|
|
|
2025-08-17 19:27:34 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 390559b10f0df7e9467937b8aab35074299a2e8f481be7229a5152e3ffe7ed71 |
[68a1abecbfda59a8cbb3b139] |
[2] |
[SYSTEM] |
[i-nctxddc-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_vd4axank.0so.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:16:01Z] |
[] |
[] |
[] |
[] |
[172.17.146.23] |
[172.17.146.23] |
1 |
Success |
__PSScriptPolicyTest_vd4axank.0so.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:16:01 +0000 UTC |
2025-08-17 10:16:01 +0000 UTC |
|
|
|
2025-08-17 10:16:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 39a4a59bc23add47d95ef4a9da5ed8297c27af52f2849a0c391ab0bec771bfb9 |
[68a523a99ba7c92b34976f99] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ToolbarMechanism.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:42Z] |
[aa7a6652a4a923356890ebff6458a56b] |
[6d5e975aa1d77df18c0af44663d1624e8bd1b7e3] |
[215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32] |
[05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ToolbarMechanism.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
18432 |
aa7a6652a4a923356890ebff6458a56b |
|
1.0.8565.40737 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
6d5e975aa1d77df18c0af44663d1624e8bd1b7e3 |
215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32 |
05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 39babfe5a257c3f70a0122f469eb5d455f108d92ef6ed29c2671d11c8af07ca3 |
[68a4631d55f0b006fedad272] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\tmpEXO_ymugosv2.gkz.psm1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T11:42:16Z] |
[25f6f28a796e9a16e24dbc1f4b571fcd] |
[432556ecdc36601d6a9fac7cf788ef1d3e80e6d4] |
[59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738] |
[6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_ymugosv2.gkz.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\ |
|
2317071 |
25f6f28a796e9a16e24dbc1f4b571fcd |
|
|
Not Signed |
2025-08-19 11:42:15 +0000 UTC |
2025-08-19 11:42:15 +0000 UTC |
432556ecdc36601d6a9fac7cf788ef1d3e80e6d4 |
59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738 |
6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc |
2025-08-19 11:42:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3a724546eaf82269dbb7d3bdfb06e468c774707620a80d0b604ae73ee51b77c5 |
[68a1e030cd200d10d4db6ee9] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tzowfqkz.l4d.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:59:07Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_tzowfqkz.l4d.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:59:07 +0000 UTC |
2025-08-17 13:59:07 +0000 UTC |
|
|
|
2025-08-17 13:59:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3afb843f0e4918d554f9be37562cb7b547975a9abd11f4fc7cd4dce50291a15a |
[68a339e2be5adbffe584e4b9] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\__PSScriptPolicyTest_fbdcuvfi.npc.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T14:34:00Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_fbdcuvfi.npc.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 14:34:00 +0000 UTC |
2025-08-18 14:34:00 +0000 UTC |
|
|
|
2025-08-18 14:34:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 357fd5748acb778b1de6237309eb65fe0290be08d5e32fc02134e884c12a1306 |
[68a4855388937a93ff144375] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Core.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:08:10Z] |
[3ba54cdf80da731b9f6ebe6c649cf015] |
[8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6] |
[9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8] |
[ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Authentication.Core.dll |
C:\Stryker\iBed Server Application\Stryker.Authentication\ |
Stryker.iBedServer.Authentication.Core |
12800 |
3ba54cdf80da731b9f6ebe6c649cf015 |
Stryker.iBedServer.Authentication.Core |
1.0.0 |
Not Signed |
2023-03-16 10:22:14 +0000 UTC |
2023-03-16 10:22:14 +0000 UTC |
8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6 |
9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8 |
ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691 |
2025-08-19 14:08:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 43b1b8f830df33fef0fc4f5c10069ac655b83937012cf73ad55bad235238bc97 |
[68a47171d049740da00e3073] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:43:21Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:43:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3b79fa3b8774cf773d2be2b43838690be854b013fb8c2d9bd2f37f785e4ae026 |
[68a522d623123fde9545058b] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0ssyhuf.33a.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T01:20:16Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_x0ssyhuf.33a.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 01:20:16 +0000 UTC |
2025-08-20 01:20:16 +0000 UTC |
|
|
|
2025-08-20 01:20:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3ba0dde62898ed08dc4f55cbed827a684b970fc9f43d69de9560c7bf9dc14cd4 |
[68a5c71fb45a26b65db7a290] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_ISUser.dll] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[D:\QS1\QAU\Updates\02010125001WsgInst.EXE] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T13:01:11Z] |
[3ef6f1c756c57e30a9fd0e227865981f] |
[d61460d652ba2e0997e708d97b6aba533084732c] |
[a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783] |
[5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
_ISUser.dll |
C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\ |
|
94208 |
3ef6f1c756c57e30a9fd0e227865981f |
|
|
Not Signed |
2025-08-20 13:01:10 +0000 UTC |
2023-03-22 15:26:00 +0000 UTC |
d61460d652ba2e0997e708d97b6aba533084732c |
a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783 |
5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4 |
2025-08-20 13:01:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3ba6c727c92b41483a366d4b2fd01ef6e3a8ceb7be816e024f8a0d5faf856473 |
[68a34b98a6132bf659cce5a9, 68a34df0b71eea1289980a0e] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[Servers] |
[Servers Audit] |
[v2258.855] |
["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe" ] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T15:47:09Z, 2025-08-18T15:58:03Z] |
[804fa0b65d9ba3c4d4cec6e4d310d70d] |
[f23e8bbf5af98bc0c2c2df7790dea8b5db238598] |
[f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89] |
[c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
AIUniWksNET.exe |
C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ |
Access It! |
22830592 |
804fa0b65d9ba3c4d4cec6e4d310d70d |
Access It! |
10.1.0.7 |
Not Signed |
2023-07-25 16:11:38 +0000 UTC |
2023-07-25 16:11:38 +0000 UTC |
f23e8bbf5af98bc0c2c2df7790dea8b5db238598 |
f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89 |
c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e |
2025-06-09 21:58:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3c821227f2dc92e0c1de7a26082facf9b0e85a2b2e3b225fab87dc6edb34453e |
[68a3b07b89708f7e107efed0] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\qtdzz51j.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-18T23:00:05Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
qtdzz51j.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 23:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3c873753c906fb01e21cf7bcf337e6fa474ed3ef1e9ccc508c198a7aa4f2842d |
[68a4710327010168d4b669b8] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x3h3gz1y.44q.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T12:41:36Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_x3h3gz1y.44q.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 12:41:36 +0000 UTC |
2025-08-19 12:41:36 +0000 UTC |
|
|
|
2025-08-19 12:41:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3c8e1ab5ca374a7ba51b0820a46058e1d7e0c62ee95328846b7303f270189c16 |
[68a3146b5f0c41860c8c84fa, 68a3146b5f0c41860c8c8557] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\http\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[3a6789c5b85c6996587dd3ec235bf1d9] |
[df72469849f10e2db9f7ff195431d0810d0b8e64] |
[a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15] |
[81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\http\__pycache__\ |
|
9627 |
3a6789c5b85c6996587dd3ec235bf1d9 |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
df72469849f10e2db9f7ff195431d0810d0b8e64 |
a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15 |
81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3cd049c2f8c5bdb6c368fb84bca681b13665b252ba5028e71ad65d5879480dff |
[68a16556adb18f56bab6ec7c, 68a2b4a8c289c4a5fdc2edaf, 68a4085529d877e962e90ae6, 68a557e71e5d7a1efef2595b] |
[2] |
[SYSTEM] |
[u-vpg1b] |
[NT AUTHORITY] |
[C:\icm\pcce\PG1B\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[efcc66337aaed727c34450475323c64d] |
[9e1f8b6df794cb9dced363dc53ce3f6a6cc46052] |
[607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834] |
[07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9] |
[172.25.196.36] |
[172.25.196.36] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\PG1B\bin\ |
|
410 |
efcc66337aaed727c34450475323c64d |
|
|
Not Signed |
2021-10-07 20:04:30 +0000 UTC |
2023-06-01 14:34:59 +0000 UTC |
9e1f8b6df794cb9dced363dc53ce3f6a6cc46052 |
607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834 |
07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3eb85a6d8d93e0d3ee61087dfb0427718c11cba113e404d84a4e203359470984 |
[68a4d176f9567d58ffcb80f3] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:33:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:33:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3ed751253cac2e36e658b51aadd1c769514ba9f17d8ad49a9d80100e2741564a |
[68a4ccd13efa8341e1766c86] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:11Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:13:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3f1b19d863fe5465ce545c4b8d093cff1a7d4196615f002f775e75020c5dafd9 |
[68a5d4b82ee390c0e8baf302] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_501hqqj5.bkq.ps1] |
[Servers] |
[Servers Audit] |
[v2293.885] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:59:18Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_501hqqj5.bkq.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 13:59:18 +0000 UTC |
2025-08-20 13:59:18 +0000 UTC |
|
|
|
2025-08-20 13:59:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3f307e3d89f6577b8a0da2aa01b182740d6e157ee29c09338dc0f206c4a73ed0 |
[68a34b98a6132bf659cce5b7, 68a34df0b71eea1289980a1c] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataEntities.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z] |
[23f4c4bf3f3744246e5d5a9e7a94a624] |
[d5847e3644ee656be1d90f885a09ecadd39c7073] |
[d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d] |
[56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.DataEntities.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Data Entities |
3763712 |
23f4c4bf3f3744246e5d5a9e7a94a624 |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:02:48 +0000 UTC |
2023-04-26 15:02:48 +0000 UTC |
d5847e3644ee656be1d90f885a09ecadd39c7073 |
d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d |
56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18 |
2025-05-13 05:13:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3fd6123c84aa2ee51ad22f9dd1a1c58f111163f5dd88b2bb6bed125d924bb8f0 |
[68a2c431b2390923232c295a] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b1tu0kxe.c1z.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T06:11:49Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_b1tu0kxe.c1z.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 06:11:49 +0000 UTC |
2025-08-18 06:11:49 +0000 UTC |
|
|
|
2025-08-18 06:12:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 44e564c6b36b57fa94cdcddbc11e741ffddf976ec407ac94c772bea6666f5b34 |
[68a3146b5f0c41860c8c8504, 68a3146b5f0c41860c8c852a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\re\__pycache__\_parser.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[51480655d8c23400bade8fc5c8ab7092] |
[0b0c8a12ff3634c2e31a68e7afb12b0d246588ea] |
[76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb] |
[8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_parser.cpython-313.pyc |
C:\Program Files\Python\Lib\re\__pycache__\ |
|
43572 |
51480655d8c23400bade8fc5c8ab7092 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
0b0c8a12ff3634c2e31a68e7afb12b0d246588ea |
76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb |
8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 44f9ad23efffcc78362a47f3e2ba1f9b47cc174f01ef1284f605cc30cda15cea |
[68a511cf5bc894dc77f9eaa6] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_f6a35165c321489a9856b32c2808949d.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:07:37Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_f6a35165c321489a9856b32c2808949d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4501ed01ec29f06c2d1989aa6ef3f08a3b7d285924f453c84565cc43aba296ce |
[68a5148159ddbe2cd55af622] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_740b673dcc864dc7858bc48f64edbaf4.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:19:09Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_740b673dcc864dc7858bc48f64edbaf4.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:19:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 453486eb8a7efac6fb88de6df7d8ab54f042c3c7344c842f641fa006a0cfaac4 |
[68a189d9de5d48d3c147792c, 68a2dadb3dc591405ef57c41, 68a42cd899e203b32835f07d, 68a57e117df58485104aee22] |
[2] |
[hppc] |
[ivOSCCCRS] |
[IVOSCCCRS] |
[C:\bin\OsccBackup.cmd] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:40:49Z, 2025-08-18T07:40:47Z, 2025-08-19T07:40:47Z, 2025-08-20T07:40:47Z] |
[a29fb1288a2dd2d0c972e30105a63175] |
[15d2a944519f3b805ee4b99667fde4b9668a147d] |
[45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5] |
[41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a] |
[172.17.21.71] |
[172.17.21.71] |
1 |
Success |
OsccBackup.cmd |
C:\bin\ |
|
2973 |
a29fb1288a2dd2d0c972e30105a63175 |
|
|
Not Signed |
2022-05-08 10:35:14 +0000 UTC |
2022-03-01 18:17:44 +0000 UTC |
15d2a944519f3b805ee4b99667fde4b9668a147d |
45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5 |
41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a |
2025-08-09 07:40:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 408d1d3e00f66c7c097415bd83df1faf13c1b569544f912c5338b77d9670d9c5 |
[68a223f72bb592d298740955] |
[2] |
[SYSTEM] |
[uvOSCCN2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hhahwsla.xvw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T18:48:17Z] |
[] |
[] |
[] |
[] |
[172.25.18.157] |
[172.25.18.157] |
1 |
Success |
__PSScriptPolicyTest_hhahwsla.xvw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 18:48:17 +0000 UTC |
2025-08-17 18:48:17 +0000 UTC |
|
|
|
2025-08-17 18:48:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 409361e2925b82cbf6cfda29f317520ff097d1d57da407655d436ed30c234c83 |
[68a1c38b973b3b5b863775cc] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_r1zh4xco.ihx.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T11:56:52Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_r1zh4xco.ihx.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 11:56:52 +0000 UTC |
2025-08-17 11:56:52 +0000 UTC |
|
|
|
2025-08-17 11:56:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 40ea93c6fd6397e89e2299bd791d3b19282ef70a83631dc8cc8e0bb167a7a71d |
[68a34b98a6132bf659cce5c3, 68a34df0b71eea1289980a28] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceContract.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:21Z, 2025-08-18T15:58:10Z] |
[8ceb6248045a8320552178fc2f0da3ba] |
[9a061be943e235b4c9992167d13dcda524afc3d4] |
[4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740] |
[73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.ServiceContract.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Access Control Service Contract |
141312 |
8ceb6248045a8320552178fc2f0da3ba |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:03:18 +0000 UTC |
2023-04-26 15:03:18 +0000 UTC |
9a061be943e235b4c9992167d13dcda524afc3d4 |
4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740 |
73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c |
2025-05-13 05:13:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 422ff53244750a3f619a88e8a3a82ef6119bb87ad85214fba800b335ae7bb687 |
[68a55c701c90616dc58121dd] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2afljjje.gan.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:26:06Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_2afljjje.gan.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:26:06 +0000 UTC |
2025-08-20 05:26:06 +0000 UTC |
|
|
|
2025-08-20 05:26:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 42dbe93c2eb99e3258531295ef0a821bf6e90b6c91b1216c874f45cbc064b24d |
[68a3146b5f0c41860c8c853b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\shutil.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[a07e5e1d630d60e8a5bf81782809e650] |
[a139b5b35604435be902c8cce6e3431a01122151] |
[a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0] |
[db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
shutil.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
67520 |
a07e5e1d630d60e8a5bf81782809e650 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
a139b5b35604435be902c8cce6e3431a01122151 |
a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0 |
db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 46baf1723a7b0a56fca54012a44a4fd0ab65fb89d928dce80e00920d3da9a01a |
[68a48b263469bcd052351305] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhl1gdaz.dy1.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T14:33:06Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_lhl1gdaz.dy1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-19 14:33:06 +0000 UTC |
2025-08-19 14:33:06 +0000 UTC |
|
|
|
2025-08-19 14:33:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 46d408f5c75a3494b1a5c7f8247be80a57da4b1f537a3e235d060f24f56351bf |
[68a34b98a6132bf659cce5c1, 68a34df0b71eea1289980a26] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceConnector.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:18Z, 2025-08-18T15:58:08Z] |
[ed3277338add7a694a7fc9d05affc2f7] |
[ff0307d1794a13aa530762c41c8bb569a520d46a] |
[2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916] |
[2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.ServiceConnector.dll |
C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ |
Access Control Service Connector |
242176 |
ed3277338add7a694a7fc9d05affc2f7 |
Access It! |
10.1.0.7 |
Not Signed |
2023-07-25 16:11:57 +0000 UTC |
2023-07-25 16:11:57 +0000 UTC |
ff0307d1794a13aa530762c41c8bb569a520d46a |
2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916 |
2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b |
2025-06-09 21:59:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 47d7f70f6e4544111d873b85d126334d5376cda93f44463620545a5afb127224 |
[68a3146b5f0c41860c8c8542, 68a3146b5f0c41860c8c8573] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\socketserver.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[a8399241bb8bb7845b245b8b45caa424] |
[5919c36160ce0593f1446305e684e923f91ace99] |
[d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b] |
[566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
socketserver.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
34517 |
a8399241bb8bb7845b245b8b45caa424 |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
5919c36160ce0593f1446305e684e923f91ace99 |
d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b |
566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 43df47ba68eed66ab11246db13bc7b31ce6a7345d897026e6c20a7fa3ebb7038 |
[68a3146b5f0c41860c8c8535, 68a3146b5f0c41860c8c8571] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\ssl.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] |
[d3f760e4ce4ce87a49a770a3b4d8ea4e] |
[bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be] |
[34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df] |
[75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
ssl.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
65200 |
d3f760e4ce4ce87a49a770a3b4d8ea4e |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be |
34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df |
75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 440079dc739fd6291ff06a190feaf77af3f297e5e47dd010391427408ed28738 |
[68a3146b5f0c41860c8c84fc, 68a3146b5f0c41860c8c854a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\copy.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[33fe159d65601e2b1e1c4a751edcfa0e] |
[daf07ab39da555cfee521467dc63f4eae2918da0] |
[f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428] |
[081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
copy.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
10634 |
33fe159d65601e2b1e1c4a751edcfa0e |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
daf07ab39da555cfee521467dc63f4eae2918da0 |
f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428 |
081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 443be458dfdb7480c2d2a40f454a2b7e5f9ec12ad259b14dcd47472009439658 |
[68a3b568d0e193c254e786f8] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_30f65d1bc44749cebb0bca5da1468193.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T23:21:07Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_30f65d1bc44749cebb0bca5da1468193.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 23:21:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 443c185fe4063ccd7cfde69c8edfeb13cbfa38ea8f5b0376091d4aa34374a6b1 |
[68a4ea6392c32cf0fcea4869] |
[2] |
[SYSTEM] |
[u-nWHL-CTX-02] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gw13nbaw.an1.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T21:19:26Z] |
[] |
[] |
[] |
[] |
[172.25.14.129] |
[172.25.14.129] |
1 |
Success |
__PSScriptPolicyTest_gw13nbaw.an1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 21:19:26 +0000 UTC |
2025-08-19 21:19:26 +0000 UTC |
|
|
|
2025-08-19 21:19:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4469255053c3419cb7051ccc31010918a1a9dac527fe2c10bcf33d95bfbc699e |
[68a3146b5f0c41860c8c8501, 68a3146b5f0c41860c8c855a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\utils.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[1c9f352ef2dc6107635c941c2692875a] |
[7dac4531071eeb0f6c989789b241fd935231bb43] |
[0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78] |
[dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
utils.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
16103 |
1c9f352ef2dc6107635c941c2692875a |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
7dac4531071eeb0f6c989789b241fd935231bb43 |
0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78 |
dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 448a0031998f7af8ce396b15c8432b788f34b1b698f89edace1448bcbd3de7d8 |
[68a1651841c74f595c525e6b] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i1vxbppv.2g2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:13:52Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_i1vxbppv.2g2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:13:52 +0000 UTC |
2025-08-17 05:13:52 +0000 UTC |
|
|
|
2025-08-17 05:14:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 48a182856395bc38e81ae27cbfa36e1949f5cc7eafe208356e9381e8c18a4f45 |
[68a50d0bba435d26b71e5005] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rerrl1la.l5r.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T23:47:13Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_rerrl1la.l5r.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 23:47:13 +0000 UTC |
2025-08-19 23:47:13 +0000 UTC |
|
|
|
2025-08-19 23:47:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 48dd119b22d9e9f12a4086afc7afa9d4cc5e9ab43294342fa54531f763c0dddc |
[68a17f8b3d3e59587db04d3d] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fb0tna5.obn.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:06:44Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_3fb0tna5.obn.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:06:44 +0000 UTC |
2025-08-17 07:06:44 +0000 UTC |
|
|
|
2025-08-17 07:06:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 490e4c588921a4516985398ef928a4796d02dcbab6984d7bbd8a56fecb665d42 |
[68a347664fc9cc000172429d] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_klxrtpvo.jas.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T15:31:42Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_klxrtpvo.jas.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 15:31:42 +0000 UTC |
2025-08-18 15:31:42 +0000 UTC |
|
|
|
2025-08-18 15:31:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 491b8bd4fad8b9cc62cec4a250351477c886070eaf3a3abc35cf10aa0719772e |
[68a245a63bd5d44dfa80605b] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikauudym.nih.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:08:25Z] |
[] |
[] |
[] |
[] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
__PSScriptPolicyTest_ikauudym.nih.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:08:25 +0000 UTC |
2025-08-17 21:08:25 +0000 UTC |
|
|
|
2025-08-17 21:12:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4937e31e371e07aafc2b6401c5f039faf292b0b3dcac6d8a7b7bad10e1561040 |
[68a4732a87eb8c73e6aa5a6a] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a51riren.tsa.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T12:50:44Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_a51riren.tsa.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 12:50:44 +0000 UTC |
2025-08-19 12:50:44 +0000 UTC |
|
|
|
2025-08-19 12:50:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4981674c47464828ef5ce68676567b7e58693b1c04b582996b90f732345f4e39 |
[68a28bda3bdcd0703f76f643, 68a3dfd9dd64bcf44b32b6dd, 68a533cd7c33c0fb7b88c885] |
[2] |
[xpressions] |
[vm-vmail] |
[WVUH] |
[C:\Users\xpressions\UnixTime.vbs] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cscript.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-18T02:09:45Z, 2025-08-19T02:17:38Z, 2025-08-20T02:28:10Z] |
[d6a0f55ebc26152cad33d2fe7190e8e6] |
[bda6893fc902aad8ca74e2e942eae107c172a458] |
[8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719] |
[05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d] |
[172.17.252.80] |
[172.17.252.80] |
1 |
Success |
UnixTime.vbs |
C:\Users\xpressions\ |
|
58 |
d6a0f55ebc26152cad33d2fe7190e8e6 |
|
|
Not Signed |
2025-08-16 02:25:49 +0000 UTC |
2025-08-16 02:25:49 +0000 UTC |
bda6893fc902aad8ca74e2e942eae107c172a458 |
8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719 |
05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d |
2025-08-16 02:25:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4a4bca6394ecb7c89998665738f714eae195f2af789f5199519bcea198d35b9b |
[68a4855388937a93ff144376] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Business.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:08:10Z] |
[c23e03a9447ffd1ae2634f27db7037d8] |
[8b33abb44d4f0eecd09b614fe804d39ffe899723] |
[2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b] |
[49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Authentication.Business.dll |
C:\Stryker\iBed Server Application\Stryker.Authentication\ |
Stryker.iBedServer.Authentication.Business |
11264 |
c23e03a9447ffd1ae2634f27db7037d8 |
Stryker.iBedServer.Authentication.Business |
1.0.0 |
Not Signed |
2023-03-16 10:22:22 +0000 UTC |
2023-03-16 10:22:22 +0000 UTC |
8b33abb44d4f0eecd09b614fe804d39ffe899723 |
2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b |
49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42 |
2025-08-19 14:08:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4562218ded432a9a34e515a5fb320438734199dfc95ee019d1a527271e89202c |
[68a55d602bb4c4aef6ea39bd] |
[2] |
[SYSTEM] |
[DP-Jackson] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1s3kxuc.1b0.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:30:00Z] |
[] |
[] |
[] |
[] |
[172.31.113.2] |
[172.31.113.2] |
1 |
Success |
__PSScriptPolicyTest_s1s3kxuc.1b0.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:30:00 +0000 UTC |
2025-08-20 05:30:00 +0000 UTC |
|
|
|
2025-08-20 05:30:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4584f98f1d747e4aea53cea83804037bbdfb1b342fd04183804e2616fe24274e |
[68a5239e621d09b2b1ed5e5a] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellFacade.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[0c2246ee9abc192383fb19860c142559] |
[743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94] |
[5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6] |
[b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ShellFacade.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
6656 |
0c2246ee9abc192383fb19860c142559 |
|
1.0.8565.40737 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94 |
5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6 |
b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 45adf7f6c69c60c4dc4bae33e1b2af87209b219c55f17426027f900f4e4a9cdd |
[68a3146b5f0c41860c8c8508, 68a3146b5f0c41860c8c855b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\urllib\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[7ac8f76f913878aafc40578f712b8cdb] |
[2dd3dd047d90b42752ad03421277a6445bc35f04] |
[21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0] |
[fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\urllib\__pycache__\ |
|
143 |
7ac8f76f913878aafc40578f712b8cdb |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
2dd3dd047d90b42752ad03421277a6445bc35f04 |
21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0 |
fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4b26c40495a3de4c3fa37e30e815a7908ed30d11328fcfe48fef638974fb8053 |
[68a3584898af4cd66a2f37c4] |
[2] |
[ellisonmea] |
[i-hvmigration3] |
[WVUHS] |
[C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1] |
[Servers] |
[Servers Audit] |
[v2260.859] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T16:43:44Z] |
[] |
[] |
[] |
[] |
[172.17.23.32] |
[172.17.23.32] |
1 |
Success |
AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1 |
C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 16:43:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4b38348ebaf6360d8bf0ce8dead8fe5f6f79a2833a41152004876136b2b16d27 |
[68a5601c347a6435334e42e9] |
[2] |
[SYSTEM] |
[I-EXTHSW-NP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zst5e0yo.1ev.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:41:39Z] |
[] |
[] |
[] |
[] |
[172.17.46.130] |
[172.17.46.130] |
1 |
Success |
__PSScriptPolicyTest_zst5e0yo.1ev.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:41:39 +0000 UTC |
2025-08-20 05:41:39 +0000 UTC |
|
|
|
2025-08-20 05:41:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4b7d94f99c341f6b208ec7b9c84579162f1279c148b2433bf5a016ed3c652bf5 |
[68a253db1b160b4afaf47a6f] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_132cbouk.vde.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:12:37Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_132cbouk.vde.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:12:37 +0000 UTC |
2025-08-17 22:12:37 +0000 UTC |
|
|
|
2025-08-17 22:12:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4b879975722f606898213bb8e96ba9186e845132251b03c60488f253608cc541 |
[68a4b0fb13fac5171eeef0d9] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Profile.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:09Z] |
[2dc079d8aa2d792a07ec17ff40d80cdf] |
[bed9acdfa41b77b37f4a56dd3c28617d47333087] |
[35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f] |
[a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.AlliancePD.UI.Profile.dll |
C:\Program Files (x86)\Cyrun\Alliance 7 Client\ |
Cyrun.AlliancePD.UI.Profile |
10752 |
2dc079d8aa2d792a07ec17ff40d80cdf |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 20:45:36 +0000 UTC |
2025-05-22 18:18:01 +0000 UTC |
bed9acdfa41b77b37f4a56dd3c28617d47333087 |
35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f |
a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb |
2025-05-22 18:54:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4bc305aa68c31d34a4ad18874c34792451dd19c8a60493021c251866469bd26f |
[68a5239e621d09b2b1ed5e59] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellEng.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[239e31ca812fad5e2f5203f7b8f5ab80] |
[d50aeb2d4fd31525703893f7311ea78fa7f8d2af] |
[3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e] |
[0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ShellEng.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
87552 |
239e31ca812fad5e2f5203f7b8f5ab80 |
|
1.0.8565.40750 |
Not Signed |
2023-06-15 02:38:22 +0000 UTC |
2023-06-15 02:38:22 +0000 UTC |
d50aeb2d4fd31525703893f7311ea78fa7f8d2af |
3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e |
0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4be293b05c924a01de67686fe37b1a3961e423289f3f56b8f100e16b38f29fad |
[68a310c9ea022246fae9eedd] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Set-Get-Aduser.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[892ec401133ec2f633b3c3b4a87e6e35] |
[090b95a5979287aa7e50cd2d968d60c7b8f67eb6] |
[ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1] |
[1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Set-Get-Aduser.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
11880 |
892ec401133ec2f633b3c3b4a87e6e35 |
|
|
Not Signed |
2021-11-18 18:17:22 +0000 UTC |
2025-08-15 20:51:43 +0000 UTC |
090b95a5979287aa7e50cd2d968d60c7b8f67eb6 |
ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1 |
1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec |
2025-08-18 11:38:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4beef0a40f3e16f017b5ae7603974118c0724286142c2e0762b3d61af4e8ddca |
[68a17a76fbb9bccd45249578] |
[2] |
[SYSTEM] |
[i-hvhprod12] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u0tfw4sf.bjl.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:44:58Z] |
[] |
[] |
[] |
[] |
[172.17.21.88] |
[172.17.21.88] |
1 |
Success |
__PSScriptPolicyTest_u0tfw4sf.bjl.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:44:58 +0000 UTC |
2025-08-17 06:44:58 +0000 UTC |
|
|
|
2025-08-17 06:45:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 47defea512c04bef937dc343eb7d484d41d313d5fff6b06df628bc0c3ae43c7e |
[68a544017e5aedf6dd6fa528] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikf4hxcy.y0e.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T03:41:43Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_ikf4hxcy.y0e.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 03:41:43 +0000 UTC |
2025-08-20 03:41:43 +0000 UTC |
|
|
|
2025-08-20 03:41:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 47e046a893fbffe1108f63752b752d62771a255d6f67bdbdb1071eb843b0b0b2 |
[68a5646930f6badf50727f64] |
[2] |
[SQLSERVERAGENT] |
[SUNR1MSD] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_wjvwcszi.j0w.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] |
[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] |
[2025-08-20T06:00:00Z] |
[] |
[] |
[] |
[] |
[172.24.20.7] |
[172.24.20.7] |
1 |
Success |
__PSScriptPolicyTest_wjvwcszi.j0w.ps1 |
C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 06:00:00 +0000 UTC |
2025-08-20 06:00:00 +0000 UTC |
|
|
|
2025-08-20 06:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 489f1bbaa35649da04ffcd7ee66ad611b107b06afb4cfd919d36a186a3059188 |
[68a22f92c12f0e944e5d68ef] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f3m5l1ce.ht1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:37:48Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_f3m5l1ce.ht1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:37:48 +0000 UTC |
2025-08-17 19:37:48 +0000 UTC |
|
|
|
2025-08-17 19:37:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4cbc7fefb55e1e392d9da7cece48d8f6cef3a7d170ce265dbf944c554c9d4766 |
[68a5c7518a82efb8e85802e9] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\QDirect.msi] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\msiexec.exe] |
[D:\QS1\QAU\Updates\02000201001QDirectInst.exe] |
[2025-08-20T13:02:04Z] |
[4d89cf5c855230c85d0439c354f32173] |
[c89bcd6fc648b7997e8edbba17794ad8f0011ab1] |
[7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6] |
[c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
QDirect.msi |
C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\ |
|
1529344 |
4d89cf5c855230c85d0439c354f32173 |
|
|
Not Signed |
2025-08-20 13:01:59 +0000 UTC |
2025-08-20 13:01:59 +0000 UTC |
c89bcd6fc648b7997e8edbba17794ad8f0011ab1 |
7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6 |
c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e |
2025-08-20 13:02:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4ce80737e5e1fdd0b599eecf559f84406387d644ed5bbe4479a6a6c5f9a04e18 |
[68a240e2a1b8ffa7235b0746] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_lrof04w0.wuh.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:51:38Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_lrof04w0.wuh.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:51:38 +0000 UTC |
2025-08-17 20:51:38 +0000 UTC |
|
|
|
2025-08-17 20:51:46 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4cf01886aee1fd82aef2cbb0b7ec1caf4a4f69efa8e128f9dd9e540a261cb8bc |
[68a4cbc3a139fdab1dc0f326] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n11iz22n.3le.ps1] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:08:42Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_n11iz22n.3le.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 19:08:42 +0000 UTC |
2025-08-19 19:08:42 +0000 UTC |
|
|
|
2025-08-19 19:08:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4e2cea78b34123526cff3e94c9cd8c533e10df41799247146d9a9583c74d20c3 |
[68a514b3a5eadadbdc4ca182] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_77050390c5844e31a367846b79e99309.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:19:55Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_77050390c5844e31a367846b79e99309.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:20:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4ed5fa8236f9cfb27c05d1405db5ddd8c9c8e9c008f8315f1728753361749256 |
[68a4893274c73cd555336ec5] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gfqx553s.ed0.ps1] |
[Servers] |
[Servers Audit] |
[v2274.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T14:24:41Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_gfqx553s.ed0.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-19 14:24:41 +0000 UTC |
2025-08-19 14:24:41 +0000 UTC |
|
|
|
2025-08-19 14:24:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4ee3b6db9e68711663695d7c7c9fbef7ff2d8f524523e78c11e8ba51082ac2d2 |
[68a16cdf801a1582a9ec932b] |
[2] |
[SYSTEM] |
[i-hBMCCure] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ycrk34bx.lm0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:47:03Z] |
[] |
[] |
[] |
[] |
[172.17.252.100] |
[172.17.252.100] |
1 |
Success |
__PSScriptPolicyTest_ycrk34bx.lm0.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:47:03 +0000 UTC |
2025-08-17 05:47:03 +0000 UTC |
|
|
|
2025-08-17 05:47:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4ee74b8165e39d490e8c0becd7eaf99a725211af6a972ae8652268e41c9b91e6 |
[68a178be850d7bbc2e6ff246] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cn0wtlxx.tc3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:37:39Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_cn0wtlxx.tc3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:37:39 +0000 UTC |
2025-08-17 06:37:39 +0000 UTC |
|
|
|
2025-08-17 06:37:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4fa0b4ddeed831597e0a0301e37344443cea83904d99b4e24b13286070c399e3 |
[68a3146b5f0c41860c8c851c, 68a3146b5f0c41860c8c856b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\charset.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] |
[ba03f33735350044c3fc13f73c1d9e98] |
[7229c271c838fece9643486a3126e4537be0b291] |
[a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0] |
[dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
charset.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
14907 |
ba03f33735350044c3fc13f73c1d9e98 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
7229c271c838fece9643486a3126e4537be0b291 |
a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0 |
dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4fe777ba7af0edac6e91e842302d7de7c476d0608ee4719c62cba23884121376 |
[68a326a0535549e009a51dcf] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_gqc0q3rf.x2b.ps1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T13:11:57Z] |
[] |
[] |
[] |
[] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
__PSScriptPolicyTest_gqc0q3rf.x2b.ps1 |
C:\Users\be10045\AppData\Local\Temp\2\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 13:11:57 +0000 UTC |
2025-08-18 13:11:57 +0000 UTC |
|
|
|
2025-08-18 13:12:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5123ab35482a1dcca7c83332b37568cc696aee9f9e8bbcad2a654014d7364d75 |
[68a15a274601a96260694483] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0ucap4f1.ghu.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:27:10Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_0ucap4f1.ghu.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:27:10 +0000 UTC |
2025-08-17 04:27:10 +0000 UTC |
|
|
|
2025-08-17 04:27:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5142d86c71c334bad9b37b907cf90abedbeadd7c1fbb7d60e606a68d22ee5bda |
[68a17a3a664e386e865decd2] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eykp4qxi.sdo.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:44:05Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_eykp4qxi.sdo.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:44:05 +0000 UTC |
2025-08-17 06:44:05 +0000 UTC |
|
|
|
2025-08-17 06:44:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 51de8bfc6a2a76476999a622438c5986131049e7095fc14dd4734df5db71c0be |
[68a31b2e462d6e1d77adb9b0] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:22:59Z] |
[aff7146174f1a92841e0ba8ecf07708c] |
[a6725b789d65d1a13bee0697a4813d334aabb024] |
[73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5] |
[9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2199 |
aff7146174f1a92841e0ba8ecf07708c |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 12:22:58 +0000 UTC |
a6725b789d65d1a13bee0697a4813d334aabb024 |
73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5 |
9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef |
2025-08-18 12:23:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 51f865b57ed83f9f9a7098c0a8a52bf04a707bfc57fb627199a2c3f4872ed2a3 |
[68a59cc78e54cccae2680af6] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_2f02889eb87340149837d95c1c42807d.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-20T10:00:28Z] |
[] |
[] |
[] |
[] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
expression_host_2f02889eb87340149837d95c1c42807d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3366.16 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 10:00:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5216ed10b9145fcc817400bb870a1097078168392f930c7b86d810268c80c642 |
[68a3146b5f0c41860c8c8541] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\lzma.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[048ad5d2b543b3a83d0ec6e1f3d9fa4b] |
[bd383b952354b3c24afc76cae8c79ff6ddecf4d3] |
[6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75] |
[f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
lzma.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
15726 |
048ad5d2b543b3a83d0ec6e1f3d9fa4b |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
bd383b952354b3c24afc76cae8c79ff6ddecf4d3 |
6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75 |
f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5227d0069ee05e485e62e216897870d9d5e9e1ba9ef645d7736411fdbf648045 |
[68a470efd203a904885c685b] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\InstallerActions.dll] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\software\Storage Manager Data Collector 20.1.2.14.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:41:13Z] |
[a3916319c269dd817403b77d46195618] |
[36029cc7e756d590e7c89d05ad9ef5365152cf15] |
[785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9] |
[df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
InstallerActions.dll |
E:\Program Files\Dell EMC\Storage Manager\msaservice\bin\ |
InstallerActions |
79360 |
a3916319c269dd817403b77d46195618 |
InstallerActions |
20.1.2.14 |
Not Signed |
2021-12-22 05:20:44 +0000 UTC |
2021-12-22 05:20:44 +0000 UTC |
36029cc7e756d590e7c89d05ad9ef5365152cf15 |
785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9 |
df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27 |
2025-05-02 01:14:05 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 52cb9bab4938352f585b879a1fbdd975c84c563bf9852ba99171f4a75c31cb29 |
[68a3146b5f0c41860c8c8522, 68a3146b5f0c41860c8c856d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\quopri.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] |
[b1e988eb0ac59301e3a28829017cff3a] |
[5b2ece43d31e183cfcc3fdb11681eda045ff797e] |
[7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a] |
[c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
quopri.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
9568 |
b1e988eb0ac59301e3a28829017cff3a |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
5b2ece43d31e183cfcc3fdb11681eda045ff797e |
7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a |
c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 52e40b2ea19d7d3459d718528d448f408f7597e4f53ab6475e81a78f4f07d7a5 |
[68a311cdc2d0d6e3eb77f209] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\Check-O365-Licenses-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[b71ecdb3e3640257f8fba06e498dd845] |
[a9ee5167e3a5da2f78e3c0c617d8920302d65991] |
[a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400] |
[50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Check-O365-Licenses-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
12437 |
b71ecdb3e3640257f8fba06e498dd845 |
|
|
Not Signed |
2025-06-11 18:05:12 +0000 UTC |
2025-06-11 18:45:00 +0000 UTC |
a9ee5167e3a5da2f78e3c0c617d8920302d65991 |
a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400 |
50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4c301be468518755aa67998c549dd4eea2ba0895fb55a26e1a8a885964c1299e |
[68a1c9ccf996ce857d01e734] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ail1oddw.4b4.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T12:23:32Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_ail1oddw.4b4.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 12:23:32 +0000 UTC |
2025-08-17 12:23:32 +0000 UTC |
|
|
|
2025-08-17 12:23:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4c855b375b56b1a5ace47ab9d2cc02f369a72c87fad3bc8e47d6286187d96319 |
[68a4cc4fe7cc38673861dc6d] |
[2] |
[my10040sa] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\v1w0tmgy.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:11:10Z] |
[] |
[] |
[] |
[] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
v1w0tmgy.dll |
C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:11:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4ca6416cc9a1d517cee067878b1f93990aad6f2363b3ce6efea6de07086d1798 |
[68a311cdc2d0d6e3eb77f219] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindUsersByEmployee ID.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[1c10957d91c1c61393c79b698897c1e9] |
[c188186442dcc7eb7f2cad3d4f49eaa481502366] |
[11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596] |
[b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
FindUsersByEmployee ID.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
4886 |
1c10957d91c1c61393c79b698897c1e9 |
|
|
Not Signed |
2023-03-24 16:17:59 +0000 UTC |
2023-03-24 17:06:27 +0000 UTC |
c188186442dcc7eb7f2cad3d4f49eaa481502366 |
11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596 |
b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 53d05f355b9570288a1107872f00b3159ebaf4a39cb844a07eb17855ad4285f1 |
[68a3536f4c961e0e97663798] |
[2] |
[SYSTEM] |
[UH-MYLA-01] |
[NT AUTHORITY] |
[C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\shutdown_pointer.cmd] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\gpscript.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T16:23:04Z] |
[5d8e141e0db6caceb5cd8b4ca1970ab0] |
[8b7779bbead93a6cb490c37182ae0af405e88595] |
[92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9] |
[47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9] |
[10.101.100.201] |
[10.101.100.201] |
1 |
Success |
shutdown_pointer.cmd |
C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\ |
|
60 |
5d8e141e0db6caceb5cd8b4ca1970ab0 |
|
|
Not Signed |
2019-10-29 12:58:12 +0000 UTC |
2019-10-28 19:17:11 +0000 UTC |
8b7779bbead93a6cb490c37182ae0af405e88595 |
92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9 |
47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9 |
2025-08-18 16:23:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 53fb85b73c86e90e48c14c8f5163b1459465f0b15fb03e3eb2e62f05dbd2f1ec |
[68a17d282a5df80b055ee0ee] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrbm4rto.beq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:56:37Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_xrbm4rto.beq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:56:37 +0000 UTC |
2025-08-17 06:56:37 +0000 UTC |
|
|
|
2025-08-17 06:56:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 55096d9d5b8d2540a0fe037e6704e0234d11b5a1f0a574cfdd576a6b0352dc57 |
[68a532147b5869d075ea1a64] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aijcft55.e2m.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T02:25:14Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_aijcft55.e2m.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 02:25:14 +0000 UTC |
2025-08-20 02:25:14 +0000 UTC |
|
|
|
2025-08-20 02:25:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 550a66f3624ef25c40cbff924e56b0b269b0ac5d28da318e3e433cefd79761db |
[68a1e1f3d67e8d114640fa37] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jfvzuzyk.al2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:06:38Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_jfvzuzyk.al2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:06:38 +0000 UTC |
2025-08-17 14:06:38 +0000 UTC |
|
|
|
2025-08-17 14:06:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5590daef95c358df33daea533ac2d818d6da44abc4e20cf97985c177d9807934 |
[68a3146b5f0c41860c8c850e, 68a3146b5f0c41860c8c8561] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\http\__pycache__\client.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[548e8b8a392268a48e6aeb8779be88db] |
[648361765ba0a4093c5dcfb5aa2c8d556e224203] |
[e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef] |
[ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
client.cpython-313.pyc |
C:\Program Files\Python\Lib\http\__pycache__\ |
|
58011 |
548e8b8a392268a48e6aeb8779be88db |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
648361765ba0a4093c5dcfb5aa2c8d556e224203 |
e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef |
ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5592943ead1aff645f47491b2d6ffc8ef4321ac3057298636b873231e9892588 |
[68a5c7e76397242bf73fa413] |
[2] |
[CA_Jnt_Talis1] |
[VM-TalisWave] |
[WVUHS] |
[C:\Users\ca_Jnt_Talis1\Desktop\MDI_Install_DeployAgent_NEW.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T13:04:30Z] |
[4528d629d40aac35051da0522f52607b] |
[4cd808677a3e168b90608c51a9306e76db5213b4] |
[31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135] |
[d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
MDI_Install_DeployAgent_NEW.ps1 |
C:\Users\ca_Jnt_Talis1\Desktop\ |
|
6587 |
4528d629d40aac35051da0522f52607b |
|
|
Not Signed |
2025-08-20 13:01:53 +0000 UTC |
2025-08-20 13:03:03 +0000 UTC |
4cd808677a3e168b90608c51a9306e76db5213b4 |
31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135 |
d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54 |
2025-08-20 13:04:39 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 55bf09ca2ad1c7643f8b49514febf0c748f5027daaaddbbff35c433a2dcc1fb5 |
[68a3146b5f0c41860c8c850f, 68a3146b5f0c41860c8c8562] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\parser.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[2927d376429456be4172708564560b31] |
[fed7f1ad061029797867412a130d3c2873860dc7] |
[b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5] |
[d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
parser.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
6522 |
2927d376429456be4172708564560b31 |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
fed7f1ad061029797867412a130d3c2873860dc7 |
b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5 |
d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 55cd58c247e720424b4ca5499424a0a70bffbb96ce9c7063e4807f4c41a3569b |
[68a166949dc690ff0657c725] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0xiwecyf.da0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:20:13Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_0xiwecyf.da0.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:20:13 +0000 UTC |
2025-08-17 05:20:13 +0000 UTC |
|
|
|
2025-08-17 05:20:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5633d05634543f25d6da937e89a8c8fa057b9213148d90451127ffc4301bb0db |
[68a1620c21c43447a35c861c] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\tmpEXO_fs3h0x0e.vmj.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:48Z] |
[c33129b61d70032a71a5b5dfb9053472] |
[789b7d25c519e94a20cdd9521a608e5d129a4a01] |
[9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9] |
[86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_fs3h0x0e.vmj.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\ |
|
2290479 |
c33129b61d70032a71a5b5dfb9053472 |
|
|
Not Signed |
2025-08-17 05:00:47 +0000 UTC |
2025-08-17 05:00:47 +0000 UTC |
789b7d25c519e94a20cdd9521a608e5d129a4a01 |
9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9 |
86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa |
2025-08-17 05:01:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5666833c44ff8d0b36e7f71e54af218b78a5ba053c7503d40bc32ec06670f74c |
[68a1620c21c43447a35c861d] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\tmp_owxdn3xb.e3x.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:54Z] |
[d4c8d2aa51d9c4ce7f5ac425a43d50fc] |
[533de221c9395696648b3311a61d6fef1fd6cdc6] |
[4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd] |
[e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmp_owxdn3xb.e3x.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\ |
|
4669570 |
d4c8d2aa51d9c4ce7f5ac425a43d50fc |
|
|
Not Signed |
2025-08-17 05:00:54 +0000 UTC |
2025-08-17 05:00:54 +0000 UTC |
533de221c9395696648b3311a61d6fef1fd6cdc6 |
4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd |
e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14 |
2025-08-17 05:01:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 50391527cb36dfceeab0bb805595d1547ffd82ddea9edac51e6aba51ac9414aa |
[68a4ccc785b914a60d739e4f, 68a4ce1fc826337212f53bec, 68a4d07753a851daf11e6937, 68a4d07753a851daf11e694c, 68a4d2d1ff2b441b8442812f, 68a4d2d1ff2b441b84428144] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\Win32.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[2bc97f533732bd5d15bf8138c411a9fe] |
[54c6081b4a286a6d67cca3435d3c10d9cf6156c3] |
[d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba] |
[1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Win32.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\ |
|
40448 |
2bc97f533732bd5d15bf8138c411a9fe |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:50 +0000 UTC |
54c6081b4a286a6d67cca3435d3c10d9cf6156c3 |
d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba |
1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5105aafd20d9944f9076e24f001c0da20c64943ae969583811bcee3f504ac44c |
[68a18cc514e7a0de47067714, 68a2de4c24b13c178e1e1496, 68a42ff2cfdf5d300631abd0, 68a5818b1ea96109fbbc885a] |
[2] |
[SYSTEM] |
[GRMC-ECW-EBO] |
[NT AUTHORITY] |
[D:\eClinicalWorks\eBO\eBO_stop.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z] |
[deb1a8bcca660fac053336c625030dfd] |
[11893c3ae1af058fb5c6c5d724fe1df21338f9fc] |
[8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa] |
[c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2] |
[192.168.3.241] |
[192.168.3.241] |
1 |
Success |
eBO_stop.bat |
D:\eClinicalWorks\eBO\ |
|
12 |
deb1a8bcca660fac053336c625030dfd |
|
|
Not Signed |
2021-07-04 20:05:12 +0000 UTC |
2021-07-04 20:05:12 +0000 UTC |
11893c3ae1af058fb5c6c5d724fe1df21338f9fc |
8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa |
c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2 |
2025-08-09 08:00:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 56ed5281697b1b3f0d4a02c56da40a350c650de6070953109d23c821ebf6c438 |
[68a3146b5f0c41860c8c8518, 68a3146b5f0c41860c8c8536] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\struct.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:18Z] |
[f2392beeb6895c05392b617d9556162e] |
[ceabc4d9e357b4e80d13f612480cad73d04827ff] |
[8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e] |
[6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
struct.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
333 |
f2392beeb6895c05392b617d9556162e |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
ceabc4d9e357b4e80d13f612480cad73d04827ff |
8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e |
6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 572e12789d1b3b49b172c9d284d902986647e527ae6c11904cc99079b42625ef |
[68a3209bdb4bb30ce9fad5ac] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\tmpEXO_xktvp1ff.kqf.psm1] |
[Servers] |
[Servers Audit] |
[v2251.850] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T12:46:13Z] |
[9dbf39fe1a5381187ab341506970b134] |
[f9a6304e4715a8409551f6752844ea809a561092] |
[710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485] |
[2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_xktvp1ff.kqf.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\ |
|
2316948 |
9dbf39fe1a5381187ab341506970b134 |
|
|
Not Signed |
2025-08-18 12:46:12 +0000 UTC |
2025-08-18 12:46:12 +0000 UTC |
f9a6304e4715a8409551f6752844ea809a561092 |
710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485 |
2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c |
2025-08-18 12:46:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 57bfa899aa02376e3b3450f27683fc6ff601584d9d7d432312bfab377d96b35a |
[68a4eb5df910568724168d54] |
[2] |
[SYSTEM] |
[u-nWHL-CTX-02] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ypcgscah.ojh.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T21:23:38Z] |
[] |
[] |
[] |
[] |
[172.25.14.129] |
[172.25.14.129] |
1 |
Success |
__PSScriptPolicyTest_ypcgscah.ojh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 21:23:38 +0000 UTC |
2025-08-19 21:23:38 +0000 UTC |
|
|
|
2025-08-19 21:23:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 57c2ad231fad6089a113121215df9ce0552f0464144b761d79dd3e31e49d6f48 |
[68a311cdc2d0d6e3eb77f204] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\connect-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[2ed5355ca6098c511f5669abf5d613b6] |
[1a3d8c611c6e70e3207d5ca6f373a20cdd227b78] |
[37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c] |
[d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
connect-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
6375 |
2ed5355ca6098c511f5669abf5d613b6 |
|
|
Not Signed |
2025-02-28 16:51:50 +0000 UTC |
2025-04-02 12:02:50 +0000 UTC |
1a3d8c611c6e70e3207d5ca6f373a20cdd227b78 |
37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c |
d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 57e4a7e4278f770db47071e08177a71056083a364ed18942e0f25de22027bb7d |
[68a5c7518a82efb8e85802e8] |
[2] |
[sk10219sa] |
[n-sktartarus] |
[WVUHS] |
[C:\Users\sk10219sa\AppData\Local\Temp\2\__PSScriptPolicyTest_hfonphxl.ba1.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Program Files\PowerShell\7\pwsh.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:01:59Z] |
[] |
[] |
[] |
[] |
[172.17.20.94] |
[172.17.20.94] |
1 |
Success |
__PSScriptPolicyTest_hfonphxl.ba1.ps1 |
C:\Users\sk10219sa\AppData\Local\Temp\2\ |
|
70 |
|
|
|
Not Signed |
2025-08-20 13:01:59 +0000 UTC |
2025-08-20 13:01:59 +0000 UTC |
|
|
|
2025-08-20 13:02:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 57f97af9aa938c09929719581541c0188b5e159ac9597204439c9d8ac677e8db |
[68a176d3006fc2fefdc26def] |
[2] |
[SYSTEM] |
[i-hvhprod01] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhlp02h0.wqr.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:29:30Z] |
[b13c3cadee294c4214cad7c499716e64] |
[85d4df31ced5762f398b8d8621816c19fa4a46b6] |
[8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574] |
[ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92] |
[172.17.22.182] |
[172.17.22.182] |
1 |
Success |
__PSScriptPolicyTest_lhlp02h0.wqr.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
b13c3cadee294c4214cad7c499716e64 |
|
|
Not Signed |
2025-08-17 06:29:30 +0000 UTC |
2025-08-17 06:29:30 +0000 UTC |
85d4df31ced5762f398b8d8621816c19fa4a46b6 |
8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574 |
ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92 |
2025-08-17 06:29:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5839f7b693b43b0b85a9ed4ecb774b241a579d00377c6a1b14a8f6f67db70475 |
[68a3146b5f0c41860c8c84f2, 68a3146b5f0c41860c8c852f] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\keyword.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[cf1385559e7ba1972e692e1e48af85b8] |
[2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba] |
[1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae] |
[8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
keyword.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
1049 |
cf1385559e7ba1972e692e1e48af85b8 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba |
1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae |
8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 586b77ca0fa977e7ca8acb449cb4a746425bd5d8b832f8d85afd67d16af47d21 |
[68a523949cec397f02de9f53] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:28Z] |
[03f29f88600b91e2c0850ef5ba848be7] |
[cacf863b314180019dcea5669f5a11593096d569] |
[b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476] |
[c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
DiagnosticsData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Data |
39424 |
03f29f88600b91e2c0850ef5ba848be7 |
Data |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:38 +0000 UTC |
2023-06-15 02:37:38 +0000 UTC |
cacf863b314180019dcea5669f5a11593096d569 |
b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476 |
c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 589581756bd4704aab790e73d2b0e243ca68e8501bbb066b3da56904ab3d0090 |
[68a472d954bfa55540708aa4] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\SuperPutty\SuperPuttyLauncherUpdater.ps1] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T12:49:27Z] |
[f448f27c617c2b801a51a55fdae3fedf] |
[6138d8b99e5f09905ace2e145b7c494c29f85cc1] |
[77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76] |
[d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
SuperPuttyLauncherUpdater.ps1 |
C:\SuperPutty\ |
|
417 |
f448f27c617c2b801a51a55fdae3fedf |
|
|
Not Signed |
2025-08-19 11:27:27 +0000 UTC |
2022-12-15 19:54:21 +0000 UTC |
6138d8b99e5f09905ace2e145b7c494c29f85cc1 |
77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76 |
d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85 |
2025-08-19 12:49:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 58a84e74187774df56fb3d1a63888b1ca4b677a6106dcef639d6c147d5fc4123 |
[68a4a57a7ce66434aa8e4a9d] |
[2] |
[ellisonmea] |
[i-hvmigration3] |
[WVUHS] |
[C:\Scripts\Export UPNfromADGroup.ps1] |
[Servers] |
[Servers Audit] |
[v2276.869] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:25:27Z] |
[b39139c6d58f98b8c3bb0727a23239b0] |
[e4496e1ce928ef22c55c8d7ec42f207ca624febf] |
[f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245] |
[2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07] |
[172.17.23.32] |
[172.17.23.32] |
1 |
Success |
Export UPNfromADGroup.ps1 |
C:\Scripts\ |
|
169 |
b39139c6d58f98b8c3bb0727a23239b0 |
|
|
Not Signed |
2024-08-01 14:45:37 +0000 UTC |
2024-08-01 14:45:37 +0000 UTC |
e4496e1ce928ef22c55c8d7ec42f207ca624febf |
f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245 |
2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07 |
2025-08-19 16:25:30 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 58bd329a2f3e91c545a51d2496f9660013865b6e43a08bf00c716aad755c140d |
[68a1642f671392a6ca40e556, 68a2b3ef86404a813dc06ef6, 68a4059c5671ca7f23589560, 68a558aca07fa49408288e49] |
[2] |
[postgres] |
[vm-ASCNEO] |
[VM-ASCNEO] |
[C:\Users\postgres\AppData\Local\Temp\pgaE191.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga17CB.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga46D0.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga7EEE.tmp\1_1.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\Program Files (x86)\pgAgent\bin\pgagent.exe] |
[2025-08-17T05:00:05Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z] |
[3b96b328a2af3ad82dc1a2afa0d21ab9] |
[069383cc28c4fa363d2b34d2bc4475e618cf40ba] |
[68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b] |
[a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63] |
[172.17.20.9] |
[172.17.20.9] |
1 |
Success |
1_1.bat |
C:\Users\postgres\AppData\Local\Temp\pgaF3EB.tmp\ |
|
48 |
3b96b328a2af3ad82dc1a2afa0d21ab9 |
|
|
Not Signed |
2025-08-09 05:00:01 +0000 UTC |
2025-08-09 05:00:01 +0000 UTC |
069383cc28c4fa363d2b34d2bc4475e618cf40ba |
68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b |
a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63 |
2025-08-09 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 532f364361b515f31c6fd2fcfd4bc56bce053839b3cd82583d1e1065c42952ce |
[68a474562c8d6a03c3aa568b] |
[2] |
[SYSTEM] |
[i-nctx-pvs2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etihzaoc.pjw.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T12:55:46Z] |
[] |
[] |
[] |
[] |
[172.17.246.5] |
[172.17.246.5] |
1 |
Success |
__PSScriptPolicyTest_etihzaoc.pjw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 12:55:46 +0000 UTC |
2025-08-19 12:55:46 +0000 UTC |
|
|
|
2025-08-19 12:55:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 539dae55d02bd0e7939fe5ca3ca52297b8925b555acabc714583dc7c80a94b0a |
[68a3146b5f0c41860c8c84f0, 68a3146b5f0c41860c8c8528] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\types.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[c61242d8c34df5630927662930df1721] |
[c178f5b9a7f198f2422663096de0f578bf4bee02] |
[e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68] |
[f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
types.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
15551 |
c61242d8c34df5630927662930df1721 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
c178f5b9a7f198f2422663096de0f578bf4bee02 |
e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68 |
f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0d4d362ed5b662a4975f8e67030e069e9e60d82137f6970653fbf89e1cf30ea6 |
[68a156aa2d859ec7c26395e4, 68a15db20a227e1e294e1d6c, 68a1642f671392a6ca40e558, 68a1a40655e9b687a677b976, 68a2cb621ea3fd6932f5b13a, 68a416054e2b3b19a2fbbd64, 68a42b1df903729d40303a39, 68a5528ca68312b2437669bf, 68a567a3b30563f7a27fa9b4] |
[2] |
[ASCSvc] |
[vm-ASCNEO] |
[WVUH] |
[E:\WAVXMLBulkMapper\email.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T04:09:46Z, 2025-08-17T04:39:46Z, 2025-08-17T05:09:46Z, 2025-08-17T09:39:46Z, 2025-08-18T06:39:46Z, 2025-08-19T06:09:46Z, 2025-08-19T07:39:46Z, 2025-08-20T04:39:46Z, 2025-08-20T06:09:46Z] |
[48709ee3e41ad538c3d93892b04c4b5b] |
[61e2058c06bf9e3f8246aca4fcc61b5d15f7029e] |
[335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f] |
[f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c] |
[172.17.20.9] |
[172.17.20.9] |
1 |
Success |
email.bat |
E:\WAVXMLBulkMapper\ |
|
676 |
48709ee3e41ad538c3d93892b04c4b5b |
|
|
Not Signed |
2020-04-23 14:39:50 +0000 UTC |
2020-07-09 11:40:59 +0000 UTC |
61e2058c06bf9e3f8246aca4fcc61b5d15f7029e |
335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f |
f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c |
2025-08-09 05:09:59 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0dc510c703e27423555cb0865302c504c258d0e84be9c30820e99edf20ff3401 |
[68a1c1205b1ee295fb12a3fd] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_el5mtldf.3sb.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T11:46:35Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_el5mtldf.3sb.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 11:46:35 +0000 UTC |
2025-08-17 11:46:35 +0000 UTC |
|
|
|
2025-08-17 11:46:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0e4fe0097d8234b17fbeae1326f4b4b2447540534ba3ee94a3aa1a5fdc13f22b |
[68a2467384622a54886c0e75] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kqy4i4tr.qqz.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:15:31Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_kqy4i4tr.qqz.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:15:31 +0000 UTC |
2025-08-17 21:15:31 +0000 UTC |
|
|
|
2025-08-17 21:15:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5978ee4cce13c15c2093be18ee2e64a99dc4c05ba4d07165da3e15b7b4f1eb8b |
[68a35866879570e8d652377c] |
[2] |
[ellisonmea] |
[i-hvmigration3] |
[WVUHS] |
[C:\Scripts\title MS license.ps1] |
[Servers] |
[Servers Audit] |
[v2260.859] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T16:44:13Z] |
[b55e3844f3b472627497819e0ebcf127] |
[ac0628a583d75844c56aee0e6aac159ad0e8a73e] |
[1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303] |
[b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d] |
[172.17.23.32] |
[172.17.23.32] |
1 |
Success |
title MS license.ps1 |
C:\Scripts\ |
|
749 |
b55e3844f3b472627497819e0ebcf127 |
|
|
Not Signed |
2025-08-18 16:43:21 +0000 UTC |
2025-08-18 16:43:21 +0000 UTC |
ac0628a583d75844c56aee0e6aac159ad0e8a73e |
1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303 |
b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d |
2025-08-18 16:44:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 59aae000bb01010f781af45b77817f924e75d97a1abf8d67454238536b84aca7 |
[68a311cdc2d0d6e3eb77f212] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Find AD group like.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[5f27bfc20834874273ef6c0b60856d71] |
[54dcc7f884056915280b76cfd26dd39e9bdf56cd] |
[a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa] |
[0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Find AD group like.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
3343 |
5f27bfc20834874273ef6c0b60856d71 |
|
|
Not Signed |
2022-06-22 13:27:40 +0000 UTC |
2025-08-07 16:54:52 +0000 UTC |
54dcc7f884056915280b76cfd26dd39e9bdf56cd |
a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa |
0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5a305cf3c8c6fee6d48f5fc09ba2f530d9e959b9bb1a6e485bbfb077021495a9 |
[68a4b0fb13fac5171eeef0da] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.Contracts.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:10Z] |
[ad5552d4c204409a6b6e24fbabee1bad] |
[d72232bb811610c471658c6d946bdf1c214f024e] |
[fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597] |
[eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.Pegasus.Contracts.dll |
C:\Program Files (x86)\Cyrun\ADS - 17978\ |
Cyrun.Pegasus.Contratcs |
37888 |
ad5552d4c204409a6b6e24fbabee1bad |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 08:50:12 +0000 UTC |
2025-05-22 18:17:47 +0000 UTC |
d72232bb811610c471658c6d946bdf1c214f024e |
fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597 |
eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946 |
2025-05-22 18:47:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5b5749e19ca32ad429018e253c40621d84544eced490d75bf3ee7f84343e0c28 |
[68a2263198ac9267ed12be6d] |
[2] |
[SYSTEM] |
[DP-Fairmont] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2uejqjh1.2yt.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T18:57:44Z] |
[] |
[] |
[] |
[] |
[172.16.121.132] |
[172.16.121.132] |
1 |
Success |
__PSScriptPolicyTest_2uejqjh1.2yt.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 18:57:44 +0000 UTC |
2025-08-17 18:57:44 +0000 UTC |
|
|
|
2025-08-17 18:57:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5b8e3aeec520fb97107e50abdf1f33dba021e6385ace51b9aacbe3161e418125 |
[68a523949cec397f02de9f4a] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\caching.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:26Z] |
[4d40957c49945c3871b53bda5e7c22d3] |
[7b5821614de77201a478240c8c468031e458623d] |
[b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1] |
[a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
caching.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
caching |
19456 |
4d40957c49945c3871b53bda5e7c22d3 |
caching |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:54 +0000 UTC |
2023-06-15 02:37:54 +0000 UTC |
7b5821614de77201a478240c8c468031e458623d |
b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1 |
a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5bf9e5548e81c3ee09ecb53ead92a28a1d2094b11f3de1a72e78bb835d6e755a |
[68a5239e621d09b2b1ed5e48] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:33Z] |
[f2ac8256579118dfa592ae6c06393f67] |
[f293eeba2fbafe1e52e80a39365616ca358484d6] |
[d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9] |
[75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
MonitoringData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Data |
27136 |
f2ac8256579118dfa592ae6c06393f67 |
Data |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:20 +0000 UTC |
2023-06-15 02:38:20 +0000 UTC |
f293eeba2fbafe1e52e80a39365616ca358484d6 |
d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9 |
75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5c4d2817d99c1de0b6f825cb3a0030bcfe697672c3b920dd4a85939c97a460bc |
[68a1a3e8ae65e4e5452ad826] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_igsbqipt.nzy.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:41:56Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_igsbqipt.nzy.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:41:56 +0000 UTC |
2025-08-17 09:41:56 +0000 UTC |
|
|
|
2025-08-17 09:42:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 56d1a755466328027aaea1d9a6e449868f1b7dc45b532b9627a3626f67ca91d9 |
[68a311cdc2d0d6e3eb77f21c] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\MailBoxFolderPermissionsO365-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:49Z] |
[44133f691b3ffa11118c549f31a652a9] |
[646cbcf0e29f58d55a2ea858476b30fbe73db5e3] |
[8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94] |
[0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
MailBoxFolderPermissionsO365-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
66064 |
44133f691b3ffa11118c549f31a652a9 |
|
|
Not Signed |
2025-07-18 16:43:45 +0000 UTC |
2025-07-18 20:48:14 +0000 UTC |
646cbcf0e29f58d55a2ea858476b30fbe73db5e3 |
8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94 |
0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 56e5500ac59d874c2f28b3141c3e7b0dea5a5db01f7b86c167d905b29499aa67 |
[68a25efe3635347d5469494d] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_ybuwjehe.dy2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:03Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_ybuwjehe.dy2.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 23:00:03 +0000 UTC |
2025-08-17 23:00:03 +0000 UTC |
|
|
|
2025-08-17 23:00:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 59043ff80f6a43b4041d20cac0cea712e7426eb429ff93ceb25bb906bf0421d7 |
[68a25c5f2155d94949889b12] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d354we2i.k1a.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:48:59Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_d354we2i.k1a.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:48:59 +0000 UTC |
2025-08-17 22:48:59 +0000 UTC |
|
|
|
2025-08-17 22:49:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 59494928170e51ca4e76b4519106dcbe83fa1abd8afea4829f610d24d5d74318 |
[68a5239e621d09b2b1ed5e5e] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[caf160ccadc9a873ce2932cbd7153a2f] |
[c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e] |
[ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb] |
[3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Stanley.Infra.CommLayerBase.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Stanley.Infra.CommLayerBase |
22016 |
caf160ccadc9a873ce2932cbd7153a2f |
Stanley.Infra.CommLayerBase |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:24 +0000 UTC |
2023-06-15 02:36:24 +0000 UTC |
c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e |
ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb |
3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 10f86ca48d4a4bbb975aa700c731c3fbe72dd351a60c5f9c660cc27b3165175a |
[68a202fd73f6d2c0d39cd925] |
[2] |
[SYSTEM] |
[HV-Datsun] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w1kmz4zz.e0v.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T16:27:38Z] |
[] |
[] |
[] |
[] |
[172.17.23.222] |
[172.17.23.222] |
1 |
Success |
__PSScriptPolicyTest_w1kmz4zz.e0v.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 16:27:38 +0000 UTC |
2025-08-17 16:27:38 +0000 UTC |
|
|
|
2025-08-17 16:27:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 127668c98e4a256a396efc19add7a3d570fc1f0a411a4012199f7c630851145c |
[68a31a7af7c31bbfe169b9b0] |
[2] |
[SYSTEM] |
[i-nWHLAPP01] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bcpjzu5b.dhj.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:20:04Z] |
[] |
[] |
[] |
[] |
[172.17.146.33] |
[172.17.146.33] |
1 |
Success |
__PSScriptPolicyTest_bcpjzu5b.dhj.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:20:04 +0000 UTC |
2025-08-18 12:20:04 +0000 UTC |
|
|
|
2025-08-18 12:20:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 12a5ca9322fea13fcb43d129b87ba2be1d566650185bf5def00b2e4602a17256 |
[68a19c6991a4554163504734, 68a2ecdfe7265ab6e4a25092, 68a43e759d6f6b2d5e445385, 68a5900679c659b659e73766] |
[2] |
[SYSTEM] |
[i-nPharmguard] |
[NT AUTHORITY] |
[C:\Program Files\Smiths Medical\IISLogMaintain.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T09:00:00Z, 2025-08-18T09:00:01Z, 2025-08-19T09:00:00Z, 2025-08-20T09:00:00Z] |
[95fb67e179d4e07ec247bb9f783bc905] |
[85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e] |
[b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98] |
[74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c] |
[172.17.22.222] |
[172.17.22.222] |
1 |
Success |
IISLogMaintain.bat |
C:\Program Files\Smiths Medical\ |
|
147 |
95fb67e179d4e07ec247bb9f783bc905 |
|
|
Not Signed |
2020-08-07 16:11:14 +0000 UTC |
2016-10-31 22:24:18 +0000 UTC |
85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e |
b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98 |
74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c |
2025-08-09 09:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 12d861e4fb434e98ce0c5f91301a6025b5a84a108ba9a4b8644e730419eae5af |
[68a5239e621d09b2b1ed5e44] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MenuMechanism.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:31Z] |
[0c0d3646da06ec03465d50305002b13e] |
[478f57ff589dfbfe82f1d5326355a3a624d4f778] |
[9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de] |
[ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
MenuMechanism.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
16384 |
0c0d3646da06ec03465d50305002b13e |
|
1.0.8565.40737 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
478f57ff589dfbfe82f1d5326355a3a624d4f778 |
9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de |
ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 13667a217d2a70dc86e0f82fe2473bcbf2ad1d99fd00dc412ad72d8d06d076ff |
[68a3146b5f0c41860c8c8510, 68a3146b5f0c41860c8c8563] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\feedparser.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[be27a5f36419634606677e6fa71aa08d] |
[cbecf541ea0883be47c01dcaefc6dbea7d643dde] |
[531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961] |
[22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
feedparser.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
20575 |
be27a5f36419634606677e6fa71aa08d |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
cbecf541ea0883be47c01dcaefc6dbea7d643dde |
531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961 |
22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 137e5a5cb2ade0a22a101541c06e699d054d556a9fdfb5f921e49aeb84c4c441 |
[68a3146b5f0c41860c8c84ff, 68a3146b5f0c41860c8c854b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\datetime.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[54cb321c2eed002f565e6528ea807a30] |
[568adbd741f0b5367410f189ae092931a364959d] |
[50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82] |
[9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
datetime.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
419 |
54cb321c2eed002f565e6528ea807a30 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
568adbd741f0b5367410f189ae092931a364959d |
50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82 |
9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 137f566c237c53bf6a59b349eb49fd635f4c8542b19024a4706ed912ec4c84c5 |
[68a60636046f9961fe8098a7] |
[2] |
[CA_Jnt_FormFast4] |
[u-NFP2] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\__PSScriptPolicyTest_wl5srk2d.2vs.ps1] |
[Servers] |
[Servers Audit] |
[v2307.897] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T17:30:29Z] |
[] |
[] |
[] |
[] |
[172.25.17.195] |
[172.25.17.195] |
1 |
Success |
__PSScriptPolicyTest_wl5srk2d.2vs.ps1 |
C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 17:30:29 +0000 UTC |
2025-08-20 17:30:29 +0000 UTC |
|
|
|
2025-08-20 17:30:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 13d2884626fe8588a24e0cec74ab305a961c96afef3e60bbfbf506407767ea46 |
[68a269db7d044cbfa4a5a343] |
[2] |
[SYSTEM] |
[HV-I-FAMELASTIC] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yyej1nxr.c5v.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T23:46:24Z] |
[] |
[] |
[] |
[] |
[172.17.252.183] |
[172.17.252.183] |
1 |
Success |
__PSScriptPolicyTest_yyej1nxr.c5v.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 23:46:24 +0000 UTC |
2025-08-17 23:46:24 +0000 UTC |
|
|
|
2025-08-17 23:46:35 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0d1ee835c881e5f8a90127d71176b19a5f527136f4b33d877cebe729c11efe09 |
[68a5c8eceb9e7b7716dce204, 68a5ca39b5df6e9c598d9a16, 68a5ca39b5df6e9c598d9a23, 68a5ccf2ddfdba423e488639, 68a5ccf2ddfdba423e488647, 68a5ccf2ddfdba423e488655, 68a5ccf2ddfdba423e488662, 68a5ccf2ddfdba423e48866f, 68a5ccf2ddfdba423e48867c, 68a5ccf2ddfdba423e488689, 68a5ccf2ddfdba423e488696] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\helpers.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] |
[2025-08-20T13:08:53Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:50Z, 2025-08-20T13:22:52Z] |
[55a6027dd1e0a5e48063566b84073d33] |
[b64ef951eba0b844f0a7155cca53f91eda45f185] |
[614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88] |
[d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
helpers.ps1 |
C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ |
|
8350 |
55a6027dd1e0a5e48063566b84073d33 |
|
|
Not Signed |
2025-08-20 13:08:38 +0000 UTC |
2024-01-20 18:07:08 +0000 UTC |
b64ef951eba0b844f0a7155cca53f91eda45f185 |
614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88 |
d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6519fa21fd6c2089d9cd74a1c19e586b97cafa58b95e7f32cc8843106a52297f |
[68a3146b5f0c41860c8c8554, 68a3146b5f0c41860c8c8579] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\token.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[7bfdfbbb892249eaf8c980f98d7c019e] |
[192a5bf782608ebb77060023442b3dfaefec7dba] |
[6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a] |
[269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
token.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
3572 |
7bfdfbbb892249eaf8c980f98d7c019e |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
192a5bf782608ebb77060023442b3dfaefec7dba |
6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a |
269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6536f5e98cbead09f04f349e790d5138cd064acc602f927805d373d7a02cd4ec |
[68a4b0fb13fac5171eeef0d4] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[Servers] |
[Servers Audit] |
[v2280.872] |
["C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe" ] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T17:08:06Z] |
[13d3058a8838596abc2f8a562eb926a0] |
[55a6af07ae596cc5aca567ed04c8f723fe4efaaf] |
[067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a] |
[6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.AlliancePD.UI.exe |
C:\Program Files (x86)\Cyrun\Alliance 7 Client\ |
Cyrun.AlliancePD.UI |
46097920 |
13d3058a8838596abc2f8a562eb926a0 |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 20:45:36 +0000 UTC |
2025-05-22 18:18:00 +0000 UTC |
55a6af07ae596cc5aca567ed04c8f723fe4efaaf |
067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a |
6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520 |
2025-05-22 18:54:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5c742d86087c450491cc0f16495345ebb8370e5ee270c9cb9a41ff4d6a025a7f |
[68a311cdc2d0d6e3eb77f208] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\MSGraph-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[3d8ddd6c9c73fc785f2dc328bb9f2ebe] |
[b081f7516433c926509b9956d80b8bde72db7f74] |
[59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc] |
[4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
MSGraph-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
4650 |
3d8ddd6c9c73fc785f2dc328bb9f2ebe |
|
|
Not Signed |
2025-03-04 16:00:03 +0000 UTC |
2025-08-08 16:03:32 +0000 UTC |
b081f7516433c926509b9956d80b8bde72db7f74 |
59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc |
4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5cd6bec8ee21373838f1a1072495ae8e3b328563e40bd645686b228630adc1b2 |
[68a1938ae03173a283ad7807] |
[2] |
[SYSTEM] |
[WHL-STOREFRONT1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2honujtp.dwp.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:32:01Z] |
[] |
[] |
[] |
[] |
[172.18.112.145] |
[172.18.112.145] |
1 |
Success |
__PSScriptPolicyTest_2honujtp.dwp.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:32:01 +0000 UTC |
2025-08-17 08:32:01 +0000 UTC |
|
|
|
2025-08-17 08:32:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5d01fc9d29c18726538eee8972df20e160e6a9e2beb0f05ecc50f823fdb330c7 |
[68a501fb7a753eb605659392] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_2jpi5rl5.43j.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-19T23:00:03Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
__PSScriptPolicyTest_2jpi5rl5.43j.ps1 |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 23:00:03 +0000 UTC |
2025-08-19 23:00:03 +0000 UTC |
|
|
|
2025-08-19 23:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5e455451e13e287c4d2bfb59325a352b61cdce7953692d39ff3fde8f521ae157 |
[68a1c9fe26ef4c5d33d741b6] |
[2] |
[SYSTEM] |
[CI1BEFS3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4ryswf2w.ra1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T12:24:23Z] |
[] |
[] |
[] |
[] |
[172.18.112.86] |
[172.18.112.86] |
1 |
Success |
__PSScriptPolicyTest_4ryswf2w.ra1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 12:24:23 +0000 UTC |
2025-08-17 12:24:23 +0000 UTC |
|
|
|
2025-08-17 12:24:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5eb4e339d92213bf88a05a9ae0fbfa5c9be2cba35b15033f9750537527ebbbb7 |
[68a1dc8ef7acbde1f06aea97] |
[2] |
[SYSTEM] |
[WH1EMGSQL1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nqjmeb4k.jw4.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:43:33Z] |
[] |
[] |
[] |
[] |
[172.18.99.115] |
[172.18.99.115] |
1 |
Success |
__PSScriptPolicyTest_nqjmeb4k.jw4.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:43:33 +0000 UTC |
2025-08-17 13:43:33 +0000 UTC |
|
|
|
2025-08-17 13:43:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5f4e6697d29e9da65f102eb5281347669f297da17c779c3d98c498fec0d902ed |
[68a3146b5f0c41860c8c8500, 68a3146b5f0c41860c8c8559] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[0961f322c725036a4b676715ca3df2ea] |
[0503b6748380bbc9aabe03713ace8ac2e7225770] |
[5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422] |
[0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
1895 |
0961f322c725036a4b676715ca3df2ea |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
0503b6748380bbc9aabe03713ace8ac2e7225770 |
5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422 |
0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 5f569870e905db236ba305ca0da4cfd820ef82f59ef451505ab6c93239f84eb0 |
[68a1a492a55ce8c2d93b813d] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae1fymez.nje.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:44:46Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_ae1fymez.nje.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:44:46 +0000 UTC |
2025-08-17 09:44:46 +0000 UTC |
|
|
|
2025-08-17 09:44:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 601e017b57a87b714d691bb19b0d53984f1d1a66f227ceb8bbc2e8a8d63617c7 |
[68a3274a2bbf81532b7d73f6] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ksxmyi50.q5r.ps1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T13:14:47Z] |
[] |
[] |
[] |
[] |
[172.17.146.3] |
[172.17.146.3] |
1 |
Success |
__PSScriptPolicyTest_ksxmyi50.q5r.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 13:14:47 +0000 UTC |
2025-08-18 13:14:47 +0000 UTC |
|
|
|
2025-08-18 13:14:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6075b77d8dc01b2c8b4d17ba6e0d36189e63f6af58ebebbe688034a0f03649ba |
[68a50205736560052fcd1832] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\vfluk3hv.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-19T23:00:14Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
vfluk3hv.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 23:00:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 60e451f72cdbb8e0e9ea32540baf67cd8fd5d6cedbd7a85ac28ac61581589702 |
[68a235831d100d9bbeccc36f] |
[2] |
[SYSTEM] |
[i-hPRNRemisol] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iuw52xms.vda.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:03:04Z] |
[] |
[] |
[] |
[] |
[172.17.23.88] |
[172.17.23.88] |
1 |
Success |
__PSScriptPolicyTest_iuw52xms.vda.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:03:04 +0000 UTC |
2025-08-17 20:03:04 +0000 UTC |
|
|
|
2025-08-17 20:03:15 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 60f0e85181d3b53d78e9e6ecebe0ab722314b06b9c192ee5f7cd901c436979d1 |
[68a3146b5f0c41860c8c8507, 68a3146b5f0c41860c8c852d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\functools.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[74324067d7541c3433020bf331282bae] |
[36705cffb70e444b9521d2e7d5b3e1d6a65770f8] |
[231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740] |
[3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
functools.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
42627 |
74324067d7541c3433020bf331282bae |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
36705cffb70e444b9521d2e7d5b3e1d6a65770f8 |
231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740 |
3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6745c612329bcbcf5d60ea434bbbed729fbfb3044b85ea1daf63168cd72a8378 |
[68a4ccc785b914a60d739e54, 68a4ce1fc826337212f53bf0, 68a4d07753a851daf11e693b, 68a4d07753a851daf11e6953, 68a4d2d1ff2b441b84428133, 68a4d2d1ff2b441b8442814a] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\OLE.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[c25582d0ba9781b4cfaee35c30265a89] |
[c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6] |
[756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03] |
[960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
OLE.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\ |
|
95232 |
c25582d0ba9781b4cfaee35c30265a89 |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:12:45 +0000 UTC |
c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6 |
756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03 |
960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 675413a3d571393b0c220c2b15036a8bef01c048df4c30302082951b74043963 |
[68a3146b5f0c41860c8c8516, 68a3146b5f0c41860c8c8569] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\base64mime.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] |
[2b2542f960659edfdc9c44ec8f938ecf] |
[2450e46ca73940aa558b6dd4c2658db3c6e9d229] |
[9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c] |
[3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
base64mime.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
3982 |
2b2542f960659edfdc9c44ec8f938ecf |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
2450e46ca73940aa558b6dd4c2658db3c6e9d229 |
9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c |
3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 61343f806096e4fc91407dc38a85cf399bdcdd696d1d405476f1207533ded21a |
[68a4ccc785b914a60d739e4c] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 62024863eaffd84b599b90a47e2a9a4751a30ff0a683ad8fe6ee34a88d5ec438 |
[68a180e9582a53738bf6196b, 68a2d270bd2fe14956418886, 68a42433cb394578e09d7013, 68a575b4037e225cd9e58524] |
[2] |
[IT.HelpDesk] |
[PCH-BGSwap] |
[PCH-DOMAIN] |
[C:\WS_FTP_Scripts\Movessi_837.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:00:32Z, 2025-08-18T07:00:27Z, 2025-08-19T07:00:27Z, 2025-08-20T07:00:27Z] |
[284c1cdb556927de4b3a316643ffc87d] |
[e410568d05b9af3418141d325b55cb697d99ac21] |
[65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85] |
[723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d] |
[10.20.22.79] |
[10.20.22.79] |
1 |
Success |
Movessi_837.bat |
C:\WS_FTP_Scripts\ |
|
134 |
284c1cdb556927de4b3a316643ffc87d |
|
|
Not Signed |
2022-02-03 21:55:11 +0000 UTC |
2022-02-03 22:01:36 +0000 UTC |
e410568d05b9af3418141d325b55cb697d99ac21 |
65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85 |
723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d |
2025-08-09 07:04:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 631c20f213e711cef26bbb9333315083fc002c886a177fc7a58baf239246b0fb |
[68a3146b5f0c41860c8c854f, 68a3146b5f0c41860c8c8575] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\linecache.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[27d8b6c682f952b431b6828ff2909e5c] |
[603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a] |
[d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c] |
[b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
linecache.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
7150 |
27d8b6c682f952b431b6828ff2909e5c |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a |
d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c |
b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 635dda72c3c6e62d4ca2ad23babcab4ebc80d20f98bc19f81a80f2c519820e2d |
[68a18e5a59acceacbe55b00f, 68a2ddd9e2924f584cca6bdc, 68a4315a5c922431d0b72ae7, 68a580dc948b28af3ee1a272] |
[2] |
[ca_tsk_idbadge] |
[i-nVM-IDBadge] |
[WVUHS] |
[C:\New DBCleaner\DatabaseCleaner.bat] |
[Servers] |
[Servers Audit] |
[v2248, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:00:01Z, 2025-08-18T08:00:02Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z] |
[34fef7d2fff558162f7cf87d74aa8e03] |
[35cd5aa7a5316f7e59b9f0481592a65ba3c32548] |
[11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6] |
[8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55] |
[172.17.251.92] |
[172.17.251.92] |
1 |
Success |
DatabaseCleaner.bat |
C:\New DBCleaner\ |
|
4103 |
34fef7d2fff558162f7cf87d74aa8e03 |
|
|
Not Signed |
2023-12-13 19:59:10 +0000 UTC |
2023-04-03 20:05:46 +0000 UTC |
35cd5aa7a5316f7e59b9f0481592a65ba3c32548 |
11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6 |
8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55 |
2025-08-09 08:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 64108cd7e8f9191dd24c6cd52bf90bb7c6d83435b247310d7b235f4e6e4462d0 |
[68a3146b5f0c41860c8c84e6, 68a3146b5f0c41860c8c8519] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\encodings\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] |
[c2cdf437a74a8110e8c8e31d70476eac] |
[6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d] |
[b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5] |
[61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\encodings\__pycache__\ |
|
6025 |
c2cdf437a74a8110e8c8e31d70476eac |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d |
b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5 |
61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 64777527feb80342cffb4fa4eb4c083aeef79259506dd17882b418e63a6cfe9a |
[68a523949cec397f02de9f4d] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CellsDiagPlugIn.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:27Z] |
[3247209b37912925bc215dfdd852765d] |
[f0f111857ad27804276dd06ebea2124265752b99] |
[fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b] |
[639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
CellsDiagPlugIn.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
CellsDiagPlugIn |
16896 |
3247209b37912925bc215dfdd852765d |
CellsDiagPlugIn |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:00 +0000 UTC |
2023-06-15 02:38:00 +0000 UTC |
f0f111857ad27804276dd06ebea2124265752b99 |
fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b |
639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 64dba8b2abfb2c9a3cadbc9da524592ca7d348251d7992a2b293d424333ddb11 |
[68a4ccc785b914a60d739e46, 68a4ce1fc826337212f53be6, 68a4d07753a851daf11e6930, 68a4d07753a851daf11e6943, 68a4d07753a851daf11e6949, 68a4d2d1ff2b441b84428128, 68a4d2d1ff2b441b8442813b, 68a4d2d1ff2b441b84428142] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl522.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] |
[ece6e23c61bd350b773b221dd7117a0b] |
[b82dd61eca567e878559410ec92fe5c1f4942827] |
[12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae] |
[95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
perl522.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ |
|
1513472 |
ece6e23c61bd350b773b221dd7117a0b |
|
|
Not Signed |
2021-10-20 13:41:15 +0000 UTC |
2021-10-20 13:42:29 +0000 UTC |
b82dd61eca567e878559410ec92fe5c1f4942827 |
12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae |
95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6aef072490cee258c32dff646f5e5318c5c7f222116119bcddba3d24ca99c288 |
[68a4ac67cfad262556985010] |
[2] |
[CA_Jnt_DAWS3] |
[i-hMSFT-ODA] |
[WVUHS] |
[C:\Assessments\ADAssessment\run.cmd] |
[Servers] |
[Servers Audit] |
[v2278.870] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T16:51:08Z] |
[c07996c3ee2580340e0ef67b322a7cab] |
[0ecd81be989fcff13486833ffe5642dcb8f95d35] |
[b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f] |
[246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93] |
[172.17.23.172] |
[172.17.23.172] |
1 |
Success |
run.cmd |
C:\Assessments\ADAssessment\ |
|
237 |
c07996c3ee2580340e0ef67b322a7cab |
|
|
Not Signed |
2024-08-08 15:51:08 +0000 UTC |
2024-08-08 15:51:08 +0000 UTC |
0ecd81be989fcff13486833ffe5642dcb8f95d35 |
b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f |
246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93 |
2025-08-12 16:51:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6c08bc17521b4e491191131a59f6670cea4cfde1602c1e4d68b7d48ade7c0df1 |
[68a232f86a75868d4aaa6d01] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zxalxqpu.45h.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:52:21Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_zxalxqpu.45h.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:52:21 +0000 UTC |
2025-08-17 19:52:21 +0000 UTC |
|
|
|
2025-08-17 19:52:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 654db9b5673ac13103fd728375f4f07b150f1ad7581db231c4852464dde28d7e |
[68a1c1a2a2fc50ac4b0f3d54] |
[2] |
[SYSTEM] |
[i-nosccapp2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_za4tfwmo.5uv.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T11:48:48Z] |
[] |
[] |
[] |
[] |
[172.17.250.140] |
[172.17.250.140] |
1 |
Success |
__PSScriptPolicyTest_za4tfwmo.5uv.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 11:48:48 +0000 UTC |
2025-08-17 11:48:48 +0000 UTC |
|
|
|
2025-08-17 11:48:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 65aae2d587ee1ea71d61262951090e49fe23de56242c8a9a51976e6be146f58f |
[68a5239e621d09b2b1ed5e57] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Reporter.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:37Z] |
[2f985088066c429f7ded59c429f9e3b1] |
[568bfe5a3fbd545ef448b1853b52848299c8e64b] |
[e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644] |
[f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Reporter.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Reporter |
12288 |
2f985088066c429f7ded59c429f9e3b1 |
Reporter |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:18 +0000 UTC |
2023-06-15 02:38:18 +0000 UTC |
568bfe5a3fbd545ef448b1853b52848299c8e64b |
e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644 |
f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 65e36fe2679c2a738bce1f11bc44f5ecaccc0b2aa794481e9a3da95fee273829 |
[68a193ce4e3c049885d2ea95, 68a2e554dc234255d3b8e587, 68a436fbf3463c41a9aea0b7, 68a588945ea9afa580b255da] |
[2] |
[SYSTEM] |
[GRMC-ECW-EBO] |
[NT AUTHORITY] |
[D:\eClinicalWorks\eBO\eBO_start.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:30:01Z, 2025-08-18T08:30:01Z, 2025-08-19T08:30:01Z, 2025-08-20T08:30:01Z] |
[c08203060d93393af38d1b3c2740552f] |
[1b371466fbd5c6f1ea33373992b920991adbecc9] |
[544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c] |
[2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d] |
[192.168.3.241] |
[192.168.3.241] |
1 |
Success |
eBO_start.bat |
D:\eClinicalWorks\eBO\ |
|
13 |
c08203060d93393af38d1b3c2740552f |
|
|
Not Signed |
2021-07-04 20:04:47 +0000 UTC |
2021-07-04 20:04:47 +0000 UTC |
1b371466fbd5c6f1ea33373992b920991adbecc9 |
544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c |
2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d |
2025-08-09 08:30:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 664078f030aa3df98066673e611d90a158661c5b965a4e46de8de0953da177fb |
[68a5c8eceb9e7b7716dce206, 68a5ccf2ddfdba423e488648] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1, C:\_work_devops_mdi\_temp\fceedb9f-ba6b-41c0-9ef2-a7e4bd4a6240.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:08:56Z, 2025-08-20T13:22:29Z] |
[e1cedcd3667c280811e42f433dad71f9] |
[748c14065c2144416d5ed03f50f5220e302fccc9] |
[2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96] |
[fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1 |
C:\_work_devops_mdi\_temp\ |
|
963 |
e1cedcd3667c280811e42f433dad71f9 |
|
|
Not Signed |
2025-08-20 13:08:56 +0000 UTC |
2025-08-20 13:08:56 +0000 UTC |
748c14065c2144416d5ed03f50f5220e302fccc9 |
2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96 |
fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 665c0db974060c2dd20238cc5dfa62525214c41afdd9af5323ff71d73888c0ab |
[68a231ae7d77b9bdafa93994] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0lu13bn4.pix.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:43:19Z] |
[] |
[] |
[] |
[] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
__PSScriptPolicyTest_0lu13bn4.pix.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:43:19 +0000 UTC |
2025-08-17 19:43:19 +0000 UTC |
|
|
|
2025-08-17 19:46:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 66871d215d9b658f655d342e7fb104a541e57792b012584470f33832195fd5f9 |
[68a572d0a4efe9f49e2cb5ec] |
[2] |
[SYSTEM] |
[u-hvhprod12] |
[NT AUTHORITY] |
[C:\Windows\Cluster\CauScript.cmd] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T07:00:00Z] |
[cfaaf3aa63b88b2338b432dd4cde45ad] |
[face75e7dc3b0cdf63652698d51e93b325872c4b] |
[5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a] |
[ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4] |
[172.25.19.217] |
[172.25.19.217] |
1 |
Success |
CauScript.cmd |
C:\Windows\Cluster\ |
|
798 |
cfaaf3aa63b88b2338b432dd4cde45ad |
|
|
Not Signed |
2024-07-24 17:11:13 +0000 UTC |
2025-03-27 13:16:50 +0000 UTC |
face75e7dc3b0cdf63652698d51e93b325872c4b |
5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a |
ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4 |
2025-08-13 07:00:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 66a1912b4df1c32f92d326398253aaf513a587c9b820ebeadf0ba5e2b3bc0703 |
[68a1e4af1459697ae7b8a1fc] |
[2] |
[SYSTEM] |
[i-nSwisslog] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5vmqoyzz.0lc.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:18:14Z] |
[] |
[] |
[] |
[] |
[172.17.253.93] |
[172.17.253.93] |
1 |
Success |
__PSScriptPolicyTest_5vmqoyzz.0lc.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:18:14 +0000 UTC |
2025-08-17 14:18:14 +0000 UTC |
|
|
|
2025-08-17 14:18:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 66a7c58a048946967c97c8069fcee758ef27df1332efdd25bc395f970aa047ce |
[68a4a66a77aec68de12158a1] |
[2] |
[be10045eu] |
[i-nsdprodmon1] |
[WVUHS] |
[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:29:28Z] |
[81770ef45b8d159737e044b339977f15] |
[3a12a57b41dfe8c522205a10420cba0e3c5f3147] |
[beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea] |
[c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6] |
[172.17.252.208] |
[172.17.252.208] |
1 |
Success |
PC Info.ps1 |
\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ |
|
2052 |
81770ef45b8d159737e044b339977f15 |
|
|
Not Signed |
2025-04-22 13:59:56 +0000 UTC |
2025-08-19 16:29:27 +0000 UTC |
3a12a57b41dfe8c522205a10420cba0e3c5f3147 |
beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea |
c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6 |
2025-08-19 16:29:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 66ca0acbcb6ad02b31c5d704cc07f5927e3c38e9b9c7187e1cc9d6e3902e7ba0 |
[68a523a99ba7c92b34976f9b] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:43Z] |
[e320f4994ce53c449d5a9121c61d7e48] |
[ef0c8fc252698f38fd60036b728d7f67bf7074d0] |
[6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe] |
[d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
UnderlyingData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
UnderlyingData |
212992 |
e320f4994ce53c449d5a9121c61d7e48 |
UnderlyingData |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:20 +0000 UTC |
2023-06-15 02:37:20 +0000 UTC |
ef0c8fc252698f38fd60036b728d7f67bf7074d0 |
6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe |
d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6e9bf94501d732a882f9f6017f1e628d9eec703c87cda857b695201fad5feb4a |
[68a5cc349d52e7a8b7af63d7] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\Talis\Atlas\temp\SetupDatabase.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:50Z] |
[f45826be75a820fca461e3877f40f93a] |
[a039f338905c85ada621455b1333be17f0bafe4a] |
[7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f] |
[330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
SetupDatabase.ps1 |
C:\Talis\Atlas\temp\ |
|
1701 |
f45826be75a820fca461e3877f40f93a |
|
|
Not Signed |
2025-08-20 13:08:55 +0000 UTC |
2025-08-20 13:22:28 +0000 UTC |
a039f338905c85ada621455b1333be17f0bafe4a |
7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f |
330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062 |
2025-08-20 13:23:00 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6f30e0e23ce47898752d2c51fe0bf30691c48bb35818bb4d8e75c6fe5db142dd |
[68a3b9a777cc2b5ee11bb211] |
[2] |
[SYSTEM] |
[i-nctx-natus1] |
[NT AUTHORITY] |
[C:\NeuroWorks\DynamicFields\WS\npm\ws.cmd] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\NeuroWorks\XLSyncServer.exe] |
[2025-08-18T23:30:44Z] |
[9eaf7a8371a51fdabe1bc1120ded09ac] |
[737379e4db0e374c08a427b0ceb496733fe40de6] |
[53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a] |
[68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be] |
[172.17.147.114] |
[172.17.147.114] |
1 |
Success |
ws.cmd |
C:\NeuroWorks\DynamicFields\WS\npm\ |
|
297 |
9eaf7a8371a51fdabe1bc1120ded09ac |
|
|
Not Signed |
2021-04-06 21:04:16 +0000 UTC |
2021-04-06 21:04:16 +0000 UTC |
737379e4db0e374c08a427b0ceb496733fe40de6 |
53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a |
68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be |
2025-08-13 05:01:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6fa36b743c48152e494d0ab2d1883621817ce58257ffbbc73994241e079bb356 |
[68a412e7ad89f01a7d4f2c8f] |
[2] |
[SQLSERVERAGENT] |
[SUNR1MSD] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_qswudxhc.vas.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] |
[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] |
[2025-08-19T06:00:01Z] |
[956c45ce00aedbd67f024fcd9158dab5] |
[742e83c7348f268bad8519de65010e007851121d] |
[1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3] |
[d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3] |
[172.24.20.7] |
[172.24.20.7] |
1 |
Success |
__PSScriptPolicyTest_qswudxhc.vas.ps1 |
C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ |
|
80 |
956c45ce00aedbd67f024fcd9158dab5 |
|
|
Not Signed |
2025-08-19 06:00:00 +0000 UTC |
2025-08-19 06:00:00 +0000 UTC |
742e83c7348f268bad8519de65010e007851121d |
1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3 |
d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3 |
2025-08-19 06:00:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 702d6dfdfaf2bb946405b69f52fb90141a13c247618695af4eb7b4b3e1d4ffe0 |
[68a231c276615c5f335cfe2a] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fdl5e5o.cmj.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:47:10Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_3fdl5e5o.cmj.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:47:10 +0000 UTC |
2025-08-17 19:47:10 +0000 UTC |
|
|
|
2025-08-17 19:47:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 676696e9a002aa8048328f5a90f5701bb020206c47ed28490493c341fb4a9362 |
[68a5239e621d09b2b1ed5e58] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ServiceUtils.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:37Z] |
[75e9bc83737e8ac074c23a4855102d3e] |
[efb997511f127d246a4abe1bcb83dd177283cef3] |
[47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621] |
[4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ServiceUtils.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
ServiceUtils |
5632 |
75e9bc83737e8ac074c23a4855102d3e |
ServiceUtils |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:16 +0000 UTC |
2023-06-15 02:38:16 +0000 UTC |
efb997511f127d246a4abe1bcb83dd177283cef3 |
47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621 |
4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6863fe2234ffda46d9ca1fd9f15003f42b2191acdd10175e3f295523c0b35045 |
[68a15d35e038b834e144693e, 68a2ac48f8706bf2d8f3933a, 68a400602dba59b513ad7bed, 68a54f94d489f4294ecfa570] |
[2] |
[cbord_support] |
[I-HOdyssey] |
[I-HODYSSEY] |
[D:\CBORD Odyssey\PCS\EndOfDay\EndOfDay.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[D:\CBORD Odyssey\Shared\pTaskService.exe] |
[2025-08-17T04:30:21Z, 2025-08-18T04:30:00Z, 2025-08-19T04:30:28Z, 2025-08-20T04:30:25Z] |
[e60dc73b04d6e2accd1eeed6e2178d78] |
[44b03d03b40ede397aa93727bb5464cf60e9d3fc] |
[13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca] |
[3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51] |
[172.17.20.134] |
[172.17.20.134] |
1 |
Success |
EndOfDay.bat |
D:\CBORD Odyssey\PCS\EndOfDay\ |
|
1565 |
e60dc73b04d6e2accd1eeed6e2178d78 |
|
|
Not Signed |
2019-04-26 20:58:04 +0000 UTC |
2019-04-26 20:58:04 +0000 UTC |
44b03d03b40ede397aa93727bb5464cf60e9d3fc |
13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca |
3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51 |
2025-08-09 04:30:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 686df88dac104103d9df30377e187bfef2774b327f2725bd46546ccfa8f1c47d |
[68a4cc59fc641401b4957020] |
[2] |
[my10040sa] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\3vrnzq1i.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:11:10Z] |
[] |
[] |
[] |
[] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
3vrnzq1i.dll |
C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:11:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 691a1c5b70ebf0b85877f67faa0e3d8ffca23df66e5b70fbc597785a8cc68004 |
[68a37d0917e07e4b1ee5b6ea] |
[2] |
[SYSTEM] |
[I-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c0pz0nqf.kwc.ps1] |
[Servers] |
[Servers Audit] |
[v2266.863] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T19:20:32Z] |
[] |
[] |
[] |
[] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
__PSScriptPolicyTest_c0pz0nqf.kwc.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 19:20:32 +0000 UTC |
2025-08-18 19:20:32 +0000 UTC |
|
|
|
2025-08-18 19:20:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6a246071bce4f1e018078a46114367a68ac47c87a95ccc8d8f67825af57fe2c4 |
[68a1d28de9af155194d2aec4] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\tmpEXO_fw3fz0us.dhn.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T13:00:51Z] |
[82e97abd23c8de7a9b490694482f33dc] |
[20a7a80fc89ad6ca536270ef77e7995348376274] |
[133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405] |
[e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_fw3fz0us.dhn.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\ |
|
2290479 |
82e97abd23c8de7a9b490694482f33dc |
|
|
Not Signed |
2025-08-17 13:00:49 +0000 UTC |
2025-08-17 13:00:49 +0000 UTC |
20a7a80fc89ad6ca536270ef77e7995348376274 |
133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405 |
e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087 |
2025-08-17 13:01:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6a84610ee0fcaa82f8fc0b8c6799775fae29224adcc09328521c70d36559bb38 |
[68a1a6f6ab9b82ca8e55699b, 68a2f7b2b08830f3e9b0f829, 68a4496619bdd82aa6777765, 68a59b0fee561f972b16e39b] |
[2] |
[SYSTEM] |
[VM-MICROS] |
[NT AUTHORITY] |
[C:\MICROS\Res\Pos\Scripts\Filemain.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\MICROS\Common\Bin\AutoSeqServ.exe] |
[2025-08-17T09:45:02Z, 2025-08-18T09:45:01Z, 2025-08-19T09:45:02Z, 2025-08-20T09:45:04Z] |
[d7c8f1b516611d9ca035742a0f006f04] |
[ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe] |
[8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc] |
[78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a] |
[172.17.20.133] |
[172.17.20.133] |
1 |
Success |
Filemain.bat |
C:\MICROS\Res\Pos\Scripts\ |
|
11724 |
d7c8f1b516611d9ca035742a0f006f04 |
|
|
Not Signed |
2021-05-27 13:50:45 +0000 UTC |
2015-01-16 19:03:22 +0000 UTC |
ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe |
8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc |
78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a |
2025-08-09 09:45:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7180b610c1b42f95fcc13a2e684b7abefca30b30f8920a27ccc5546e91696361 |
[68a3146b5f0c41860c8c853e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\contextlib.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[c7c8787dc599c99b0745a0e0b8518991] |
[31a5f241f37f656cc0bcd1f7e46ecc135a978a6c] |
[8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d] |
[c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
contextlib.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
30502 |
c7c8787dc599c99b0745a0e0b8518991 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
31a5f241f37f656cc0bcd1f7e46ecc135a978a6c |
8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d |
c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 71899528418198443452afbed990e9e5d84f4e2f9b4711e89293c9ca2bc12ca5 |
[68a2c20aaafba12a4e8cc590] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mxicw2rz.bqc.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T06:02:43Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_mxicw2rz.bqc.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 06:02:43 +0000 UTC |
2025-08-18 06:02:43 +0000 UTC |
|
|
|
2025-08-18 06:02:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 71aa6db07375df25bd85f56968c13ae408973e021ef00026f759544a629c149c |
[68a164141ed3a862f3f246f5, 68a2b5a2f6e54082fd90f248, 68a40742ca9c58cb5ddb32a1, 68a55680cbba54c28d7a3734] |
[2] |
[bunker2] |
[vm-OSVstats] |
[WVUH] |
[C:\Users\bunker2\Desktop\BackUpZbase.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:23Z, 2025-08-18T05:00:23Z, 2025-08-19T05:00:23Z, 2025-08-20T05:00:23Z] |
[ff5ef3ef0519c188c726abaf1c67cbfd] |
[0d51e0760c23673c5aa81be4dca18e7ba8f45e22] |
[d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba] |
[5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba] |
[172.17.251.140] |
[172.17.251.140] |
1 |
Success |
BackUpZbase.bat |
C:\Users\bunker2\Desktop\ |
|
842 |
ff5ef3ef0519c188c726abaf1c67cbfd |
|
|
Not Signed |
2019-11-19 16:02:09 +0000 UTC |
2019-12-02 16:07:03 +0000 UTC |
0d51e0760c23673c5aa81be4dca18e7ba8f45e22 |
d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba |
5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba |
2025-08-09 05:00:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 71afc8b3a19c1a3353abcff459034fe52f2c0160cd3f895966e196e237039ebd |
[68a3146b5f0c41860c8c853f] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\bz2.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[05c36e3f33744bd410b3b60ff06437b3] |
[3bb9bf5aadd0e412054170f05be2eee25e7dcd09] |
[765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e] |
[657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
bz2.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
15173 |
05c36e3f33744bd410b3b60ff06437b3 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
3bb9bf5aadd0e412054170f05be2eee25e7dcd09 |
765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e |
657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 720267c540897db10c2b6a99b7967f86fcf6d1c0f6fb8a4b39422e38f85e9c69 |
[68a5239e621d09b2b1ed5e65] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Native.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:40Z] |
[5136ca4e3d39d8f9ee3870d6cd8e7db3] |
[f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55] |
[44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf] |
[c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Stanley.PeCommServices.Native.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Stanley.PeCommServices.Native |
34816 |
5136ca4e3d39d8f9ee3870d6cd8e7db3 |
Stanley.PeCommServices.Native |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:26 +0000 UTC |
2023-06-15 02:36:26 +0000 UTC |
f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55 |
44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf |
c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7235dc5de7aef8308483b63e2c5c078a90d095ccd5f3156c2ed9ae89b322c9df |
[68a17c189d49ad1bd9c4b8c8, 68a2cfae9ae51e4be825c7e3, 68a41f348cf879e8d23db673, 68a572add36d57a95b891e67] |
[2] |
[WVUHPAN] |
[U-NPANHS] |
[HS] |
[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T06:51:00Z, 2025-08-18T06:51:00Z, 2025-08-19T06:51:01Z, 2025-08-20T06:51:01Z] |
[0a26ce7cf2e4c02915e778721ce44a21] |
[143b0c534fd3539d647dcfaf6a2d108e43af8314] |
[8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f] |
[c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d] |
[172.25.17.205] |
[172.25.17.205] |
1 |
Success |
userlist.bat |
C:\Program Files\Quest Software\Management Shell for AD\ |
|
236 |
0a26ce7cf2e4c02915e778721ce44a21 |
|
|
Not Signed |
2022-05-17 13:21:40 +0000 UTC |
2022-05-17 13:21:40 +0000 UTC |
143b0c534fd3539d647dcfaf6a2d108e43af8314 |
8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f |
c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d |
2025-08-09 06:51:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6d17c45fe4e843926f5d2728244f860ec044de86259fef8758dd6b2a69a83cbe |
[68a164af314711b37247c0a2, 68a2b633bc43c5800255e661, 68a408552c9c833f6d66b3fa, 68a559867a66111383e972e5] |
[2] |
[SYSTEM] |
[i-vpg1a] |
[NT AUTHORITY] |
[C:\icm\pcce\cg1A\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[16212c7d9ea08699f15a1a4746990cdd] |
[5ed1792245fbf6b311b2484bc6a6be49ea35e3d8] |
[5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c] |
[821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999] |
[172.17.196.43] |
[172.17.196.43] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\cg1A\bin\ |
|
410 |
16212c7d9ea08699f15a1a4746990cdd |
|
|
Not Signed |
2021-10-07 20:05:32 +0000 UTC |
2021-10-07 20:05:32 +0000 UTC |
5ed1792245fbf6b311b2484bc6a6be49ea35e3d8 |
5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c |
821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6d5608ed1ffe605381b7fdaaa1845f721f1c31c27c74b69df9af47d0294b2894 |
[68a1b61f71b0825b526a1d75] |
[2] |
[SYSTEM] |
[u-nLanSweep1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oq5zqidg.eti.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:59:29Z] |
[] |
[] |
[] |
[] |
[172.25.17.127] |
[172.25.17.127] |
1 |
Success |
__PSScriptPolicyTest_oq5zqidg.eti.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:59:29 +0000 UTC |
2025-08-17 10:59:29 +0000 UTC |
|
|
|
2025-08-17 10:59:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6d8ddab3bbac620056a40b6be82e5efedfb813709b61851da809e2ccc5fb30b5 |
[68a18baf8d4efec2d0bb92e3] |
[2] |
[SYSTEM] |
[i-nIC-HIC-PRD4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bxygly1j.3u1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:58:38Z] |
[] |
[] |
[] |
[] |
[172.17.46.252] |
[172.17.46.252] |
1 |
Success |
__PSScriptPolicyTest_bxygly1j.3u1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:58:38 +0000 UTC |
2025-08-17 07:58:38 +0000 UTC |
|
|
|
2025-08-17 07:58:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 6e99f8aea61200a8607767bebef8dd852f969d2a1801e29360bdca29220d4bf9 |
[68a1a186341538f20e730a04] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p4dua1rf.kfd.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:31:41Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_p4dua1rf.kfd.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:31:41 +0000 UTC |
2025-08-17 09:31:41 +0000 UTC |
|
|
|
2025-08-17 09:31:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 74793ee7d4de7bcad44804c194370595b3b0d548bfc828c57576582be19bf54b |
[68a1aa799d53099ced8133dc] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\highcharts-export-server.cmd] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-17T10:00:00Z] |
[3ac81a5a7a9c633b48029c9dc507bd9f] |
[3e480f1ee8bff400c708645833df38ce4fa472fe] |
[90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213] |
[cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
highcharts-export-server.cmd |
C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\ |
|
305 |
3ac81a5a7a9c633b48029c9dc507bd9f |
|
|
Not Signed |
2023-05-16 22:42:52 +0000 UTC |
2023-05-16 22:42:52 +0000 UTC |
3e480f1ee8bff400c708645833df38ce4fa472fe |
90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213 |
cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4 |
2025-08-10 10:00:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 747a834bd4231d3cf7fa52e9313d5c65887b64533d4b8f563ab5f72357aae059 |
[68a2410ae6d83d3b939c50d9] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tftt2g0n.emh.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:52:12Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_tftt2g0n.emh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:52:12 +0000 UTC |
2025-08-17 20:52:12 +0000 UTC |
|
|
|
2025-08-17 20:52:26 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 749002e7e2d66cbc153077e70ef99bab1f03c4286b5e508ae413f4c53fbcb560 |
[68a2a5a1b819e527e88aea78] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zaxf5awj.to1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T04:01:34Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_zaxf5awj.to1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 04:01:34 +0000 UTC |
2025-08-18 04:01:34 +0000 UTC |
|
|
|
2025-08-18 04:01:37 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 74b304758f2740e15c3cb9527df68a81ff9e28e90445ec205bf348877535259f |
[68a523949cec397f02de9f54] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsGUI.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:29Z] |
[f3bffbe05c98add2b7078000a29f5e76] |
[8fa6ea825802a4c5104ab136854f7134874d2a56] |
[0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19] |
[537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
DiagnosticsGUI.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
GUI |
120320 |
f3bffbe05c98add2b7078000a29f5e76 |
GUI |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:08 +0000 UTC |
2023-06-15 02:38:08 +0000 UTC |
8fa6ea825802a4c5104ab136854f7134874d2a56 |
0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19 |
537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 74e7f5f7c92b26fd056281c791dafc0adc825c46f2be2bb409bc724a5d999be6 |
[68a2736e6af8de2f97a7ad5a] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_acpxurdw.4re.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T00:27:16Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_acpxurdw.4re.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 00:27:16 +0000 UTC |
2025-08-18 00:27:16 +0000 UTC |
|
|
|
2025-08-18 00:27:26 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 702e1f3fedd238eb309fa93c899b2ef80102fa2cda74761f3ee41d67d71f0096 |
[68a162f2cceea19f4902f63e] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lwo31b0u.sz1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:04:47Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_lwo31b0u.sz1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:04:47 +0000 UTC |
2025-08-17 05:04:47 +0000 UTC |
|
|
|
2025-08-17 05:04:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7090012578e497459ba0272f5f77ea05b908814dd597eb04ecf09d2c66d08c56 |
[68a3e79bb5e28efad9fbee2a] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_188db70f606541b88ee2c950bdac4d70.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T02:55:19Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_188db70f606541b88ee2c950bdac4d70.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 02:55:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7141651941e1b1d78a349f0d54ceb767b3846890318b467b8f44fb3d2b5995fe |
[68a1804bf8ae7dd3df476f07] |
[2] |
[postgres] |
[vm-ASCNEO] |
[VM-ASCNEO] |
[C:\Users\postgres\AppData\Local\Temp\pgaABA6.tmp\2_2.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\Program Files (x86)\pgAgent\bin\pgagent.exe] |
[2025-08-17T07:00:01Z] |
[849739b26d76f1e35ce128f843b7d476] |
[3ba486d6253348b31f0a4eb255c38bc4a311e2ae] |
[52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279] |
[5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7] |
[172.17.20.9] |
[172.17.20.9] |
1 |
Success |
2_2.bat |
C:\Users\postgres\AppData\Local\Temp\pgaA9AB.tmp\ |
|
53 |
849739b26d76f1e35ce128f843b7d476 |
|
|
Not Signed |
2025-08-10 07:00:04 +0000 UTC |
2025-08-10 07:00:04 +0000 UTC |
3ba486d6253348b31f0a4eb255c38bc4a311e2ae |
52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279 |
5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7 |
2025-08-10 07:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7172f9bd46851da2b13c2a4453b256fd0c20124b9ad8e41a0173a7dbe902061f |
[68a3408550f756d180107210] |
[2] |
[SYSTEM] |
[DP-Garrett] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vp0ubrbu.dgh.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T15:02:25Z] |
[] |
[] |
[] |
[] |
[172.30.48.2] |
[172.30.48.2] |
1 |
Success |
__PSScriptPolicyTest_vp0ubrbu.dgh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 15:02:25 +0000 UTC |
2025-08-18 15:02:25 +0000 UTC |
|
|
|
2025-08-18 15:02:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7180409b727c790197b600295cbeb2a6e0ad6c3847727c639eb7f2cdb0d8498b |
[68a55dba9b5d03e81a1e7635] |
[2] |
[SYSTEM] |
[i-nctx-pvs1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bgtryg2w.3id.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:31:32Z] |
[] |
[] |
[] |
[] |
[172.17.146.5] |
[172.17.146.5] |
1 |
Success |
__PSScriptPolicyTest_bgtryg2w.3id.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:31:32 +0000 UTC |
2025-08-20 05:31:32 +0000 UTC |
|
|
|
2025-08-20 05:31:38 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7705512d28fbbbbd6d047b1c60856bd3bc9f14ce39412ebd16be6b72d8bf5f7e |
[68a3439c162cd6949b8bf655] |
[2] |
[SYSTEM] |
[u-nsdprodconn1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cncncost.gsu.ps1] |
[Servers] |
[Servers Audit] |
[v2258.856] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T15:15:34Z] |
[] |
[] |
[] |
[] |
[172.25.23.179] |
[172.25.23.179] |
1 |
Success |
__PSScriptPolicyTest_cncncost.gsu.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 15:15:34 +0000 UTC |
2025-08-18 15:15:34 +0000 UTC |
|
|
|
2025-08-18 15:15:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 77c0199279811333465d5e6a415262894f0b9094771a0107686bddc496a9110a |
[68a514775cfd115be4b8dbd7] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:18:59Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:19:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7828bc8e30426a75ceff982346b5fe7b1c717029b0896c4cc7c394a40ec314c0 |
[68a3146b5f0c41860c8c84ed, 68a3146b5f0c41860c8c854c] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\threading.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[40e4a5f923e5816ab2963846fb674c1e] |
[c0d26d50e3483ae5651124f6918939ae692f3a7d] |
[741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732] |
[23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
threading.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
63210 |
40e4a5f923e5816ab2963846fb674c1e |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
c0d26d50e3483ae5651124f6918939ae692f3a7d |
741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732 |
23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7830b20e1f8ae9e230de3156d17e98207f63cd6c63999ef912d40d4e99fb27a3 |
[68a311cdc2d0d6e3eb77f216] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-badpasswordsADUserBadPasswords.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[3b8629dc59dc96ce82adf91d1ab03739] |
[7c3f23fa0bcac45de8bb40e38232e839f03eb158] |
[e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2] |
[14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
get-badpasswordsADUserBadPasswords.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
2702 |
3b8629dc59dc96ce82adf91d1ab03739 |
|
|
Not Signed |
2023-03-13 13:11:22 +0000 UTC |
2025-06-09 20:40:05 +0000 UTC |
7c3f23fa0bcac45de8bb40e38232e839f03eb158 |
e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2 |
14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 784d1aa46b8e65a94b7e1aa0313334ae3050be72c0ddad08686af6ddf4687c79 |
[68a311cdc2d0d6e3eb77f207] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\ManagedFolderAssistant-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[d70cd1d2313f5bacb6a51a2c0ef09b70] |
[45164857af19d47125730a74732f7630326beac4] |
[be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f] |
[0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
ManagedFolderAssistant-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
10816 |
d70cd1d2313f5bacb6a51a2c0ef09b70 |
|
|
Not Signed |
2025-02-28 16:57:12 +0000 UTC |
2025-04-02 20:49:07 +0000 UTC |
45164857af19d47125730a74732f7630326beac4 |
be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f |
0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 78ff80c56cd05df151c06670f6d96dcd5c6ee72ca66bcc647a12f9d7814c3408 |
[68a1a83ff1b55f2ff337408c] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-17T10:00:28Z] |
[] |
[] |
[] |
[] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3366.16 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-17 10:00:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 728f798cb1a5db0a13cf564ccbd4e4c1ff949fc578a23588a73b2e7a40a91f7f |
[68a3146b5f0c41860c8c853d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\fnmatch.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[9fac8a18afd37269810c0599d6381114] |
[c56472c5a615d096fc51a0c8db32ae5c62108803] |
[69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a] |
[7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
fnmatch.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
6810 |
9fac8a18afd37269810c0599d6381114 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
c56472c5a615d096fc51a0c8db32ae5c62108803 |
69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a |
7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 72c74ec16b239cedb3a7a5f49ab164080d8b8d6594d6e7674d47f097fc7b81c3 |
[68a2415acd5be3d52d63a10e] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_msorr1ae.sew.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:53:35Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_msorr1ae.sew.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:53:35 +0000 UTC |
2025-08-17 20:53:35 +0000 UTC |
|
|
|
2025-08-17 20:53:46 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 738d28284e023240ef65382c74ec40bf9a734d836835c7ef9cb91f97d1fbc3c8 |
[68a254df0dd861261676462f] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_norjrfd4.bib.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:16:54Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_norjrfd4.bib.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:16:54 +0000 UTC |
2025-08-17 22:16:54 +0000 UTC |
|
|
|
2025-08-17 22:17:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7424614171a04b6aa96afde3f4cd33390212c11fbbbdbd41498fad6d10439c42 |
[68a469467f8184e5222e6a4b] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_3ea4d31ef5e647b2b195425324bab514.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:08:34Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_3ea4d31ef5e647b2b195425324bab514.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:08:38 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 79ee9c9c5f8d352a018fdbfcf7a6b43bd929f0d2fb548332fb4b3eb59bc5a180 |
[68a166cbe2103169f36aaa4c, 68a2b85683c75b2a7728df23, 68a409fc2e5c970cd67b61bc, 68a55b98a62710d4188bf96a] |
[2] |
[SYSTEM] |
[vm-UHCcbord] |
[NT AUTHORITY] |
[C:\cbordwin\CBORDEOD.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:15:01Z, 2025-08-18T05:15:01Z, 2025-08-19T05:15:01Z, 2025-08-20T05:15:01Z] |
[d1f95b9724125a1c5f984fb1d1bc62d8] |
[be6d615c8334ff3e05fd27e3343f643770bf2e1f] |
[543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b] |
[121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700] |
[172.17.252.44] |
[172.17.252.44] |
1 |
Success |
CBORDEOD.bat |
C:\cbordwin\ |
|
1923 |
d1f95b9724125a1c5f984fb1d1bc62d8 |
|
|
Not Signed |
2018-08-07 19:56:21 +0000 UTC |
2018-08-07 19:57:34 +0000 UTC |
be6d615c8334ff3e05fd27e3343f643770bf2e1f |
543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b |
121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700 |
2025-08-09 05:15:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7a036e3a324a555202141726993e8c9be46eae5d5025047d59729b1179f3e30a |
[68a1590fe3d1de03981d3cb9] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1yfzzf3t.n2s.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:22:31Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_1yfzzf3t.n2s.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:22:31 +0000 UTC |
2025-08-17 04:22:31 +0000 UTC |
|
|
|
2025-08-17 04:22:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7a24379c01420760711ad0a08f28f46d6a397601f0b51a4e48b96cffa037dd01 |
[68a34b98a6132bf659cce5c5, 68a34df0b71eea1289980a2a] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataExchange.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:46Z, 2025-08-18T15:58:46Z] |
[50ea916f234c0715695ee3289f2ed436] |
[6a0449cf6f27497d7e3e65c86b275f6b5775f3cc] |
[3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf] |
[a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.DataExchange.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Data Exchange Packages |
1126912 |
50ea916f234c0715695ee3289f2ed436 |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:03:08 +0000 UTC |
2023-04-26 15:03:08 +0000 UTC |
6a0449cf6f27497d7e3e65c86b275f6b5775f3cc |
3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf |
a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a |
2025-05-13 05:13:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7b161486f98073b5ca3ae0e3e7f27c8f566ab06f8ad799373d2e403cc733db20 |
[68a4ccc785b914a60d739e4e, 68a4ce1fc826337212f53beb, 68a4d07753a851daf11e6936, 68a4d07753a851daf11e694b, 68a4d2d1ff2b441b8442812e, 68a4d2d1ff2b441b84428143] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\NamedCapture.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[13d4e8065c076cc03ca0b66f2f009cb2] |
[08256197d2405a47f7154f36728228bb13613f5e] |
[57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c] |
[019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
NamedCapture.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\ |
|
12288 |
13d4e8065c076cc03ca0b66f2f009cb2 |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:46 +0000 UTC |
08256197d2405a47f7154f36728228bb13613f5e |
57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c |
019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7b2434ec93f042d8373bd3cf763874ab9c43420543ed120001278db17adf9da6 |
[68a37f25e0879ae8dffd5e04] |
[2] |
[SYSTEM] |
[i-nctxddc-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2ivls3f0.sja.ps1] |
[Servers] |
[Servers Audit] |
[v2267.864] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T19:29:37Z] |
[] |
[] |
[] |
[] |
[172.17.146.23] |
[172.17.146.23] |
1 |
Success |
__PSScriptPolicyTest_2ivls3f0.sja.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 19:29:36 +0000 UTC |
2025-08-18 19:29:36 +0000 UTC |
|
|
|
2025-08-18 19:29:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7b91d127ab813bedce31cf44c9d0bb338d1e5dbb7c4d88a4a5f9596cb927c7f6 |
[68a5cc2ad273577648d7017b] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:44Z] |
[8afad2ba62831ccf1afb549e35a2b1bf] |
[2446f2b1eb95bb93555f1a32943d542757ac10ae] |
[7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1] |
[50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1 |
C:\_work_devops_mdi\_temp\ |
|
854 |
8afad2ba62831ccf1afb549e35a2b1bf |
|
|
Not Signed |
2025-08-20 13:22:44 +0000 UTC |
2025-08-20 13:22:44 +0000 UTC |
2446f2b1eb95bb93555f1a32943d542757ac10ae |
7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1 |
50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2 |
2025-08-20 13:22:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7b997c3cc74d393501497378b3f9012e85446d45990a040bee7862fa2d512520 |
[68a311cdc2d0d6e3eb77f21d] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\Set-MSOLUser-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:49Z] |
[64c78cb84a34c1aac1f9040f9b3fa98c] |
[5412398356155b4fa91298e55f818b7817fac6b1] |
[843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb] |
[b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Set-MSOLUser-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
5935 |
64c78cb84a34c1aac1f9040f9b3fa98c |
|
|
Not Signed |
2025-08-08 16:20:08 +0000 UTC |
2025-08-08 16:20:13 +0000 UTC |
5412398356155b4fa91298e55f818b7817fac6b1 |
843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb |
b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7c44f6e2dd5bec1edbd6982fb1e01986327ed9ad9e1ab078d43137cf5358e261 |
[68a3505955becb8a0ff1a792] |
[2] |
[SYSTEM] |
[i-nCGChaSdb] |
[NT AUTHORITY] |
[C:\Affymetrix\dbcleanup\del30d.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T16:00:01Z] |
[2abe380b66aaa9644c02efe64b7ec488] |
[d4f82f9d40f820fb58a6fd075507ec36fcb8a897] |
[4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff] |
[2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa] |
[172.17.250.114] |
[172.17.250.114] |
1 |
Success |
del30d.ps1 |
C:\Affymetrix\dbcleanup\ |
|
153 |
2abe380b66aaa9644c02efe64b7ec488 |
|
|
Not Signed |
2024-10-02 19:44:08 +0000 UTC |
2024-10-02 19:50:57 +0000 UTC |
d4f82f9d40f820fb58a6fd075507ec36fcb8a897 |
4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff |
2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa |
2025-08-11 16:00:12 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7cc7c1291b2e252bcb756546657d8c00c4f79ca981f28ce37f5c8078a65132d8 |
[68a3146b5f0c41860c8c8509, 68a3146b5f0c41860c8c855c] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\urllib\__pycache__\parse.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[a500c0a77b51df437e5212a3ccbbca4a] |
[d8ed3a2e9e061f636a16798d3b66602754a5208d] |
[369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0] |
[8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
parse.cpython-313.pyc |
C:\Program Files\Python\Lib\urllib\__pycache__\ |
|
50297 |
a500c0a77b51df437e5212a3ccbbca4a |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
d8ed3a2e9e061f636a16798d3b66602754a5208d |
369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0 |
8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7d031d09ec40cf9cfeb3455f9199da3e3f8b827cc4053d65f0a9ed878513cfe1 |
[68a3151a330e1d8c3da80971] |
[2] |
[SYSTEM] |
[i-vmBKRIM] |
[NT AUTHORITY] |
[E:\Instrument Manager\Drivers\diietldlservice.exe] |
[Servers] |
[Servers Audit] |
[v2248.849] |
["E:\Instrument Manager\Drivers\diietldlservice.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-18T11:51:23Z] |
[fa5ed12d9b5b2d41eed634a630122413] |
[4afc7da9ab03e35ccdeb5a627579699df806659c] |
[01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794] |
[66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2] |
[172.17.20.8] |
[172.17.20.8] |
1 |
Success |
diietldlservice.exe |
E:\Instrument Manager\Drivers\ |
Data Innovations LLC Lab GPS |
78336 |
fa5ed12d9b5b2d41eed634a630122413 |
Instrument Manager |
8.15.0008 |
Not Signed |
2024-10-03 15:35:11 +0000 UTC |
2024-09-18 13:42:01 +0000 UTC |
4afc7da9ab03e35ccdeb5a627579699df806659c |
01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794 |
66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2 |
2025-07-17 13:02:34 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 74fe5996cba2af0f0d12f3dcb6c8a80a977bd795b4f37f0c62631dd542d77dcb |
[68a4b0fb13fac5171eeef0d5] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.CustomControls.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:07Z] |
[6f4525a325cda08abf1b18a472526ee3] |
[9171e03c1c96b37f539557128a1c32d0d71c9dcf] |
[b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2] |
[1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.AlliancePD.UI.CustomControls.dll |
C:\Program Files (x86)\Cyrun\Alliance 7 Client\ |
Cyrun.AlliancePD.UI.CustomControls |
214528 |
6f4525a325cda08abf1b18a472526ee3 |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 20:45:35 +0000 UTC |
2025-05-22 18:17:58 +0000 UTC |
9171e03c1c96b37f539557128a1c32d0d71c9dcf |
b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2 |
1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2 |
2025-05-22 18:54:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 755edeaf25a424b1e2540116cb002ded313b73da1f426ac79c380a0f5a47d692 |
[68a3146b5f0c41860c8c8534, 68a3146b5f0c41860c8c8570] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\iterators.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] |
[94d122a5aa89600a9822e6eecac2470a] |
[b47d3670867d1edf3170e1871f654699ccdd6558] |
[b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1] |
[9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
iterators.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
2824 |
94d122a5aa89600a9822e6eecac2470a |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
b47d3670867d1edf3170e1871f654699ccdd6558 |
b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1 |
9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7d974abbff9ea70a534d75c24d021d96fc2d36fbef86539a7c32df8e99f11e9f |
[68a3146b5f0c41860c8c8543] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\tempfile.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[7ab5aff3fa2b1f285db5557e42243465] |
[ddfb6e39237347e33458183d7540eeef606d7ef9] |
[e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2] |
[477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
tempfile.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
40711 |
7ab5aff3fa2b1f285db5557e42243465 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
ddfb6e39237347e33458183d7540eeef606d7ef9 |
e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2 |
477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7e17cb2b9e2e5ac4b1f09011ecbbaf0650c23af74a9e04bc8e97cab19aa4e77c |
[68a33f3383e5334c1360eeb1] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_4ixogztp.vvu.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\RuntimeBroker.exe] |
[2025-08-18T14:56:41Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_4ixogztp.vvu.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 14:56:41 +0000 UTC |
2025-08-18 14:56:41 +0000 UTC |
|
|
|
2025-08-18 14:56:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7e5ec9321797b7625a95073957004b3dbf6bb68dbe150739d70c989bd0fc30d4 |
[68a2055f52291ed98e81a02b] |
[2] |
[SYSTEM] |
[HV-Datsun] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ywzhivlf.tki.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T16:37:42Z] |
[] |
[] |
[] |
[] |
[172.17.23.222] |
[172.17.23.222] |
1 |
Success |
__PSScriptPolicyTest_ywzhivlf.tki.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 16:37:42 +0000 UTC |
2025-08-17 16:37:42 +0000 UTC |
|
|
|
2025-08-17 16:37:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7e758ba1138fda4c2f6fe3d1dbf13865768509733a2b21297cb1854cdb41c3eb |
[68a1e01c3977fb58c6e176eb] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mksrzrw0.jcw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:58:47Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_mksrzrw0.jcw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:58:47 +0000 UTC |
2025-08-17 13:58:47 +0000 UTC |
|
|
|
2025-08-17 13:58:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7e88c063db7d11cc81424ad3a0b79439a708466a41d2515d39f435460a90ac6f |
[68a311cdc2d0d6e3eb77f214] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[04134a765a6766b8ccc33ab7b76c6484] |
[a05c6df7ded795af80ad78b3109bf6c2456c4cf4] |
[e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19] |
[6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
GP-Result.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
549 |
04134a765a6766b8ccc33ab7b76c6484 |
|
|
Not Signed |
2021-11-18 18:17:21 +0000 UTC |
2021-07-15 21:19:57 +0000 UTC |
a05c6df7ded795af80ad78b3109bf6c2456c4cf4 |
e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19 |
6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7ee90d2d178643fa86a91c933bb12080aad0ea0b7399ef08f6045a4841c54372 |
[68a3146b5f0c41860c8c8521] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\getopt.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z] |
[36b1336ce751d7a3a4f98ed3688bd5b8] |
[4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc] |
[864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc] |
[1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
getopt.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
8470 |
36b1336ce751d7a3a4f98ed3688bd5b8 |
|
|
Not Signed |
2024-11-22 22:08:49 +0000 UTC |
2024-11-22 22:08:49 +0000 UTC |
4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc |
864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc |
1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7f1c7a6dd39bd07d8bb63423b0a1a20c1a21ad1049160828ab2d4526e49937ec |
[68a3209bdb4bb30ce9fad5ab] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\aigevikz\aigevikz.dll] |
[Servers] |
[Servers Audit] |
[v2251.850] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T12:46:12Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
aigevikz.dll |
C:\Users\georgemag\AppData\Local\Temp\aigevikz\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 12:46:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7f3ab2ae868507dd7a50a8a32ca35df13c57044a206339041bea2b8656324c6d |
[68a3189a985e97167cef8607] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tftoj4kh.1uo.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:12:01Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_tftoj4kh.1uo.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:12:01 +0000 UTC |
2025-08-18 12:12:01 +0000 UTC |
|
|
|
2025-08-18 12:12:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 790685b721f1c02822e2c39c904ab990c088e6bf2934eacf9869129b18b201a7 |
[68a4d180b5900ae066920596] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:33:10Z] |
[56c6d95ae5e68a0aa0da6568a48cd047] |
[dcbd5930f6e52a715078f6ae99900819b3d5d1c3] |
[ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72] |
[0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
2786 |
56c6d95ae5e68a0aa0da6568a48cd047 |
|
|
Not Signed |
2025-08-19 19:33:06 +0000 UTC |
2025-08-19 19:33:10 +0000 UTC |
dcbd5930f6e52a715078f6ae99900819b3d5d1c3 |
ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72 |
0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f |
2025-08-19 19:33:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7914a284be2811ffbc318ac97a2f6c21a503fadfcb460e81828ca0551dac35c0 |
[68a311cdc2d0d6e3eb77f20a] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\PasswordExpirationDate.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[714d7d166b1ea948977b99df67d8c1b3] |
[aa5398703aefacd2b30922cfda05af62e8343765] |
[d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b] |
[343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
PasswordExpirationDate.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
1386 |
714d7d166b1ea948977b99df67d8c1b3 |
|
|
Not Signed |
2021-11-18 18:17:21 +0000 UTC |
2025-04-29 12:08:30 +0000 UTC |
aa5398703aefacd2b30922cfda05af62e8343765 |
d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b |
343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 79464f4def37e5ba9e14652ce241f8f4ec97e70a54e49a0b13962298d861da62 |
[68a1f536f0fc96497865c3dc] |
[2] |
[NETWORK SERVICE] |
[i-nnvrpms] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_u4u2h52q.o3j.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T15:28:42Z] |
[] |
[] |
[] |
[] |
[172.17.251.112] |
[172.17.251.112] |
1 |
Success |
__PSScriptPolicyTest_u4u2h52q.o3j.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 15:28:42 +0000 UTC |
2025-08-17 15:28:42 +0000 UTC |
|
|
|
2025-08-17 15:28:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0a9dbe448ddb227553c9a48de77405193eb5fe2bebabab9d6527c15d84d8c2ba |
[68a1a3e8ae65e4e5452ad825] |
[2] |
[SYSTEM] |
[u-hvhprod10] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gasrem2i.gfx.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:41:54Z] |
[] |
[] |
[] |
[] |
[172.25.19.215] |
[172.25.19.215] |
1 |
Success |
__PSScriptPolicyTest_gasrem2i.gfx.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:41:54 +0000 UTC |
2025-08-17 09:41:54 +0000 UTC |
|
|
|
2025-08-17 09:42:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 80ed85556abb978978c3afeabdae83a61e828e13823ad8081b5656a15ac32295 |
[68a3146b5f0c41860c8c8513, 68a3146b5f0c41860c8c8566] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\header.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[5e51285c9cc412511aae0381df5af605] |
[c34c9e21766749325670c8fb373441fa260ac2d4] |
[3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1] |
[6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
header.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
24610 |
5e51285c9cc412511aae0381df5af605 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
c34c9e21766749325670c8fb373441fa260ac2d4 |
3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1 |
6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 80eed1550c017565807bf8be35688e6845c564df5aaf1a006959e4714cfd990b |
[68a31e4459685fc083f0f272] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:36:17Z] |
[63f04652c1ffce069b2aade76da5bc56] |
[253c1f10b1facd8919193a01d57d4ce26440467e] |
[00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e] |
[277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2198 |
63f04652c1ffce069b2aade76da5bc56 |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 12:36:16 +0000 UTC |
253c1f10b1facd8919193a01d57d4ce26440467e |
00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e |
277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d |
2025-08-18 12:36:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 81151bd7410efbbd5e12a433990f411b387d65dac6d015d82ba8214539435d31 |
[68a4730f28df70c6fde369ea] |
[2] |
[shke0124] |
[Uniontown-DC-01] |
[UTWNNET] |
[C:\temp\test-pendingreboot.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:40:22Z] |
[f3d03d56da1294ef5032ad5902a255d3] |
[672d173b6c306d3c809c5409854c838452d10e25] |
[2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b] |
[7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804] |
[10.144.17.62] |
[10.144.17.62] |
1 |
Success |
test-pendingreboot.ps1 |
C:\temp\ |
|
762 |
f3d03d56da1294ef5032ad5902a255d3 |
|
|
Not Signed |
2025-07-09 12:54:01 +0000 UTC |
2025-07-09 12:54:01 +0000 UTC |
672d173b6c306d3c809c5409854c838452d10e25 |
2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b |
7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804 |
2025-08-11 12:43:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 812b0f4b717665265bc5a0620fa8be3386853418328e5a28e7ff891462f9de6b |
[68a5239e621d09b2b1ed5e4f] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackControl.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:34Z] |
[7913110d2edd6e0303dd5cc770044109] |
[47838c3517f0204ec04496a5da987943b905016f] |
[5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf] |
[3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PlaybackControl.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Control |
5632 |
7913110d2edd6e0303dd5cc770044109 |
Control |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
47838c3517f0204ec04496a5da987943b905016f |
5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf |
3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 828e4feaa7f12dcf43874a32bc8a352c6179840111d514ea71acd32dbd924944 |
[68a311cdc2d0d6e3eb77f218] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\findemailfromfreiendlyname.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[fda42888811197b147f60b25940b6167] |
[d244e5619d64dc92414029ae026b62703fe7a133] |
[19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f] |
[b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
findemailfromfreiendlyname.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
641 |
fda42888811197b147f60b25940b6167 |
|
|
Not Signed |
2023-03-15 13:32:59 +0000 UTC |
2024-11-27 21:47:05 +0000 UTC |
d244e5619d64dc92414029ae026b62703fe7a133 |
19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f |
b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 83a979fb882f2a864bd8541ffb78d55fb88e15750faae26788a8a8d63c465dee |
[68a194fcbd314bfebd3efbbe] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kzqzcg4d.co3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:38:09Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_kzqzcg4d.co3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:38:09 +0000 UTC |
2025-08-17 08:38:09 +0000 UTC |
|
|
|
2025-08-17 08:38:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 84656aa54a0cb01d9269991ebd2a95d785e26a521297c8531b4ca03f6175cc63 |
[68a1e42dda86b7950e20922a] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ihgyu0b3.oaq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T14:16:08Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_ihgyu0b3.oaq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 14:16:08 +0000 UTC |
2025-08-17 14:16:08 +0000 UTC |
|
|
|
2025-08-17 14:16:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7d55249e54c24ac0fec23c3cee31809ddac6b79c9b79941fbbb566d93c3348a6 |
[68a42c746d8e3c910ac20520] |
[2] |
[SYSTEM] |
[uvOSCCN2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jnw042yi.z53.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T07:49:00Z] |
[] |
[] |
[] |
[] |
[172.25.18.157] |
[172.25.18.157] |
1 |
Success |
__PSScriptPolicyTest_jnw042yi.z53.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 07:49:00 +0000 UTC |
2025-08-19 07:49:00 +0000 UTC |
|
|
|
2025-08-19 07:49:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7d5cb2ca9517d0abb090d033d3861aef472e348e6e0887bb8c33a9646074056b |
[68a3146b5f0c41860c8c8506, 68a3146b5f0c41860c8c852c] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\re\__pycache__\_casefix.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[d0128e493756c7a62e9dd29cfac89d8c] |
[cad9e3b8221f00371ba6e19dd31a01bab2f2ddda] |
[74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee] |
[40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_casefix.cpython-313.pyc |
C:\Program Files\Python\Lib\re\__pycache__\ |
|
1824 |
d0128e493756c7a62e9dd29cfac89d8c |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
cad9e3b8221f00371ba6e19dd31a01bab2f2ddda |
74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee |
40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7f7196ee2c55c57bd6a32a85fdb5d9d6cbb0c143db529d30f65021be1f6794da |
[68a16e26eef56db6411d81ce, 68a2bfb24201bf09ec6e1d53, 68a4115cc76143c265ae8f29, 68a562fc095f408404dbb6a7] |
[2] |
[IT.HelpDesk] |
[PCH-BGSwap] |
[PCH-DOMAIN] |
[C:\WS_FTP_Scripts\Renamessi3.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:40:45Z, 2025-08-18T05:40:45Z, 2025-08-19T05:40:45Z, 2025-08-20T05:40:45Z] |
[d9985deb5b260de564bcf74ddafcf4f6] |
[6c6ddd5954aa3514b5100674c74a727ecdef2a81] |
[24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c] |
[fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78] |
[10.20.22.79] |
[10.20.22.79] |
1 |
Success |
Renamessi3.bat |
C:\WS_FTP_Scripts\ |
|
905 |
d9985deb5b260de564bcf74ddafcf4f6 |
|
|
Not Signed |
2020-10-29 14:30:30 +0000 UTC |
2020-10-29 14:31:13 +0000 UTC |
6c6ddd5954aa3514b5100674c74a727ecdef2a81 |
24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c |
fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78 |
2025-08-09 05:44:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 80962aa98ccf32b6398709a133a9d678a4277d666bf0f68be6881a727b94cdc2 |
[68a161e4df6c771867d5823e] |
[2] |
[SYSTEM] |
[u-v3MIntGTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbe1cxlh.z1x.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:00:08Z] |
[] |
[] |
[] |
[] |
[172.25.19.86] |
[172.25.19.86] |
1 |
Success |
__PSScriptPolicyTest_jbe1cxlh.z1x.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:00:08 +0000 UTC |
2025-08-17 05:00:08 +0000 UTC |
|
|
|
2025-08-17 05:00:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 80ac258e0852de329618df81b11d6beb684dd2d207b215a5559657ffefa44475 |
[68a25efe3635347d5469494e] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\waxkiu4t.dll] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:04Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
waxkiu4t.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-17 23:00:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0ea212b296688a2fcb2dee591d081469da7cc09780e3eaf5ea0c98e34eddff46 |
[68a1af8e6937b3bfeec24717] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y3wqc145.xln.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:31:33Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_y3wqc145.xln.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:31:33 +0000 UTC |
2025-08-17 10:31:33 +0000 UTC |
|
|
|
2025-08-17 10:31:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0eeae75aee6c2b8cfef58497f07cc728a2f169217e316453c9dc577daf51c831 |
[68a1b895b65e1946e3666f15] |
[2] |
[hyperwebsvc] |
[I-NCTXEHH-001] |
[WVUHS] |
[C:\HomeHealth\EpicHHEnvSUP_SmartUpdateFull.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T11:00:09Z] |
[f4a871c36ce1398c5c89063c394fb796] |
[ff814062a8182c82de32de600bbabd8b08551fb9] |
[ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb] |
[7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
EpicHHEnvSUP_SmartUpdateFull.bat |
C:\HomeHealth\ |
|
98 |
f4a871c36ce1398c5c89063c394fb796 |
|
|
Not Signed |
2023-04-26 14:42:09 +0000 UTC |
2025-04-17 14:47:08 +0000 UTC |
ff814062a8182c82de32de600bbabd8b08551fb9 |
ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb |
7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15 |
2025-08-11 11:00:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0f144dc59a8cf91c8457c46a563833c9fd3d1f7766c9c6b99f6e85a93e942ab1 |
[68a3146b5f0c41860c8c8523] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\gettext.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z] |
[2b01d716b248affc1d5c61df52586f70] |
[01231cf7bb85f5151d9846df82dafc6b9bffb225] |
[930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38] |
[9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
gettext.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
22565 |
2b01d716b248affc1d5c61df52586f70 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
01231cf7bb85f5151d9846df82dafc6b9bffb225 |
930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38 |
9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0f1c26396d25e75da96d668173f3844426c38a9f41e23e3b17ef38c6711c5001 |
[68a1a97fd1ad1d02ded12163, 68a2fb0a27a9a45c7a219507, 68a44cbb02b8ceb81ab6baf5, 68a59e6101f0277939a73181] |
[2] |
[meditechbg] |
[PCH-PRINTER003] |
[PCH-DOMAIN] |
[C:\Printer_HP_Script\SSNP.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T10:00:27Z, 2025-08-18T10:00:27Z, 2025-08-19T10:00:27Z, 2025-08-20T10:00:27Z] |
[7a39f19ce6c8fb1d161c443d1dc7f86f] |
[6f028aff74eec5d0db149890d22a8fed50c536cb] |
[67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2] |
[5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67] |
[10.20.22.81] |
[10.20.22.81] |
1 |
Success |
SSNP.bat |
C:\Printer_HP_Script\ |
|
5014 |
7a39f19ce6c8fb1d161c443d1dc7f86f |
|
|
Not Signed |
2019-03-21 12:35:45 +0000 UTC |
2014-07-09 19:42:40 +0000 UTC |
6f028aff74eec5d0db149890d22a8fed50c536cb |
67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2 |
5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67 |
2025-08-09 10:04:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0f3cafd07fecd666babef35d2e27c9be36744d46ccbadeffb332ac1c63fc20d4 |
[68a241462d53af320f145902] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tbmkjawl.w3u.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:53:14Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_tbmkjawl.w3u.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:53:14 +0000 UTC |
2025-08-17 20:53:14 +0000 UTC |
|
|
|
2025-08-17 20:53:26 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0fb8614c9264487aeb4520463d5be45b3de0f311e175fb7615ad95127046479c |
[68a3146b5f0c41860c8c84f6, 68a3146b5f0c41860c8c8537] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\socket.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[faed5b0bdd655e08c6850bcf855f6058] |
[d5a4515c70fa7338e895a47d73b6538dddb21cc9] |
[54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b] |
[cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
socket.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
42178 |
faed5b0bdd655e08c6850bcf855f6058 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
d5a4515c70fa7338e895a47d73b6538dddb21cc9 |
54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b |
cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0fc35d2d6afaf1ed0ab607443617599e4b74b79171d41700d5e06c9ad5f9704b |
[68a5239e621d09b2b1ed5e46] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfiguration.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:32Z] |
[760728e545154c92a8f96402d642c1d5] |
[f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac] |
[226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de] |
[e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
MonitoringConfiguration.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Data |
34816 |
760728e545154c92a8f96402d642c1d5 |
Data |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:14 +0000 UTC |
2023-06-15 02:38:14 +0000 UTC |
f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac |
226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de |
e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0ffa8ca52df3c1c314eff6938435b63edee719cf8d49e070754f828bf4d9152a |
[68a4864ff17c458cfe4c9f0c] |
[2] |
[SYSTEM] |
[i-niBedV_Prod] |
[NT AUTHORITY] |
[C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe] |
[Servers] |
[Servers Audit] |
[v2273] |
["C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-19T14:02:43Z] |
[080059864bbff2e06e9634408e045e62] |
[34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c] |
[1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544] |
[ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0] |
[172.17.252.225] |
[172.17.252.225] |
1 |
Success |
Stryker.Vision.Watchdog.exe |
C:\Stryker\Stryker Vision\Watchdog\ |
Stryker.Vision.Watchdog |
138752 |
080059864bbff2e06e9634408e045e62 |
Stryker.Vision.Watchdog |
1.0.0 |
Not Signed |
2024-10-25 19:13:22 +0000 UTC |
2024-10-25 19:13:22 +0000 UTC |
34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c |
1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544 |
ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0 |
2025-05-20 14:57:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0a0ff20d66f01b5fa8926bace01d4a73a24db54811a975ea5ea4a01d43eb585b |
[68a5319ce132e4c5dc00a81c] |
[2] |
[SYSTEM] |
[u-v3mWebTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vfkwh45z.3qh.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T02:23:12Z] |
[] |
[] |
[] |
[] |
[172.25.19.83] |
[172.25.19.83] |
1 |
Success |
__PSScriptPolicyTest_vfkwh45z.3qh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 02:23:12 +0000 UTC |
2025-08-20 02:23:12 +0000 UTC |
|
|
|
2025-08-20 02:23:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8a1ced8a3f76ad3ff0b53b43010d53302e4b10d7affa3ffb69ba20a0ca24c1fb |
[68a189ed0b483022e242e958] |
[2] |
[SYSTEM] |
[i-nIC-HIC-PRD4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ax3ju4vv.gx3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:51:02Z] |
[] |
[] |
[] |
[] |
[172.17.46.252] |
[172.17.46.252] |
1 |
Success |
__PSScriptPolicyTest_ax3ju4vv.gx3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:51:02 +0000 UTC |
2025-08-17 07:51:02 +0000 UTC |
|
|
|
2025-08-17 07:51:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 84e95c6300aa357f75245f2c4da9e422ebe8bbe4db67283870cee53b02231ad7 |
[68a5239e621d09b2b1ed5e4c] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServices.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:34Z] |
[0d46a7d13dd192a9bc24c976aabe9eef] |
[acd9024e775f0381eda5fb39210490e8804f32f8] |
[965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348] |
[af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PeCommServices.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
PeCommServices |
141824 |
0d46a7d13dd192a9bc24c976aabe9eef |
PeCommServices |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:18 +0000 UTC |
2023-06-15 02:37:18 +0000 UTC |
acd9024e775f0381eda5fb39210490e8804f32f8 |
965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348 |
af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 85326460bd3f08e5658ae173143694d725b390ee91cdfee712d33f5b6f5c7fc4 |
[68a327366b9e5d3847e6ff2e] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jolominu.tok.ps1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T13:14:20Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_jolominu.tok.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 13:14:20 +0000 UTC |
2025-08-18 13:14:20 +0000 UTC |
|
|
|
2025-08-18 13:14:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 861af6ae28998ad90daf332e6ce3f52e32cb6af6490029ccdf01861030529fe0 |
[68a5cc2ad273577648d7017a] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:42Z] |
[0ec39449979000ec0584ab01673080c2] |
[fdaf52401fc4eaebb0252552d432b836277078a8] |
[3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4] |
[7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1 |
C:\_work_devops_mdi\_temp\ |
|
991 |
0ec39449979000ec0584ab01673080c2 |
|
|
Not Signed |
2025-08-20 13:22:41 +0000 UTC |
2025-08-20 13:22:41 +0000 UTC |
fdaf52401fc4eaebb0252552d432b836277078a8 |
3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4 |
7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0 |
2025-08-20 13:22:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 862923dddfc3e6f7a560567ef7ad9a8d12ba03fef8d6206164127bd69412b1cb |
[68a60640d91a6169403521ce] |
[2] |
[CA_Jnt_FormFast4] |
[u-NFP2] |
[WVUHS] |
[C:\Scripts\Compare printers on I-nfp1 to u-nfp2.ps1] |
[Servers] |
[Servers Audit] |
[v2307.897] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T17:30:34Z] |
[fa7d347cd25e73c0b857d25867f6bcff] |
[23fce09fe1c70011677b75fdc13d2b2d831bb22f] |
[11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1] |
[99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887] |
[172.25.17.195] |
[172.25.17.195] |
1 |
Success |
Compare printers on I-nfp1 to u-nfp2.ps1 |
C:\Scripts\ |
|
917 |
fa7d347cd25e73c0b857d25867f6bcff |
|
|
Not Signed |
2025-08-20 17:30:23 +0000 UTC |
2025-06-30 12:13:17 +0000 UTC |
23fce09fe1c70011677b75fdc13d2b2d831bb22f |
11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1 |
99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887 |
2025-08-20 17:30:40 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 866164cb56991315fd38941ed74b5f8245a6469c0257f717ea063397bfb9cf0c |
[68a611738671451adb8f5998] |
[2] |
[DEVSCCMADM] |
[DP-Warehouse] |
[DEV-WVUHS] |
[C:\Windows\TempInst\is-SQO0N.tmp\driversetup.tmp] |
[Servers] |
[Servers Audit] |
[v2307.897] |
["C:\WINDOWS\TempInst\is-SQO0N.tmp\driversetup.tmp" /SL5="$80C2C,180455,180224,C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\driversetup.exe" /verysilent] |
[Not Signed] |
[C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\DriverSetup.exe] |
[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe] |
[2025-08-20T18:17:00Z] |
[8bf52dfd2770c37e8f26fbca3e773e8f] |
[bbee69e2e92738aee823293871ad827fcf6e90a5] |
[489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d] |
[83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5] |
[172.16.200.2] |
[172.16.200.2] |
1 |
Success |
driversetup.tmp |
C:\Windows\TempInst\is-CVOEI.tmp\ |
Setup/Uninstall |
2907136 |
8bf52dfd2770c37e8f26fbca3e773e8f |
|
|
Not Signed |
2025-03-20 20:41:55 +0000 UTC |
2025-03-20 20:41:55 +0000 UTC |
bbee69e2e92738aee823293871ad827fcf6e90a5 |
489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d |
83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5 |
2025-03-20 20:42:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 86c806c09a7803a770f23b20b51108d5f0d29c4d1a698bb0545c63f393abadc0 |
[68a3b572a3df3f11549b8bf8] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_5b425657313647968a206bfc77c3d0ce.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T23:21:20Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_5b425657313647968a206bfc77c3d0ce.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 23:21:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 86da2f4c83c0da4f1de628febb8696b29aec95d06d8b5284f668b135042940c5 |
[68a3146b5f0c41860c8c853c] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\glob.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[270f681fa912e46a35c53cbd22e62dd5] |
[f0b5eec09e7c91aaee55e0048029b8b2cc0e8196] |
[49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585] |
[a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
glob.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
23672 |
270f681fa912e46a35c53cbd22e62dd5 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
f0b5eec09e7c91aaee55e0048029b8b2cc0e8196 |
49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585 |
a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 86e8b1e1ca221cda910b70f1a6d1897907e2c9ca96eccb7d5127bec87aa6869d |
[68a1ab05c9c3c78a4a9c60c7] |
[2] |
[SYSTEM] |
[i-nctx-pvs4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y1xem3si.bim.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:12:15Z] |
[] |
[] |
[] |
[] |
[172.17.246.6] |
[172.17.246.6] |
1 |
Success |
__PSScriptPolicyTest_y1xem3si.bim.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:12:15 +0000 UTC |
2025-08-17 10:12:15 +0000 UTC |
|
|
|
2025-08-17 10:12:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 872f4d2c0d8ef4ab77b5963e41450e69fd9561ff10cc9e426390e8e60a7ab8c2 |
[68a4ccc785b914a60d739e45, 68a4ce1fc826337212f53be5, 68a4d07753a851daf11e692f, 68a4d07753a851daf11e6942, 68a4d07753a851daf11e6948, 68a4d2d1ff2b441b84428127, 68a4d2d1ff2b441b8442813a, 68a4d2d1ff2b441b84428141] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[Servers] |
[Servers Audit] |
[v2283] |
[c:\gehc-it\ccg\quovadx\cis6.2/integrator/bin/perl -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5 -I. c:\gehc-it\ccg\quovadx\cis6.2/integrator/sbin/hcisetenv.pl -root nt , c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl c:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisetenv.pl -site _wmc_test, c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl.exe -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator/lib/perl5 c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/hcienginerun.pl -p qdxprocess] |
[Not Signed] |
[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] |
[4caadd4e182d3699d9be956724a5b1b4] |
[ba5ee1dc096bbc29f58afba973d21dca1c37dee7] |
[f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1] |
[77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
perl.exe |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ |
|
11264 |
4caadd4e182d3699d9be956724a5b1b4 |
|
|
Not Signed |
2021-10-20 13:41:15 +0000 UTC |
2021-10-20 13:42:29 +0000 UTC |
ba5ee1dc096bbc29f58afba973d21dca1c37dee7 |
f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1 |
77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 875bd9b26bac5ac888c47873184798b7e7c154a8ff5c8307e884ca895f158080 |
[68a246379a94894376e8c601] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mg01z4ld.0i1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:14:31Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_mg01z4ld.0i1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:14:30 +0000 UTC |
2025-08-17 21:14:30 +0000 UTC |
|
|
|
2025-08-17 21:14:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 7f3f1b3c3698f724b932cb15eb898fd4049fee06fb71c10dbde9e86b9c46e387 |
[68a17bfc1ee81336fa54a933] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrgtzqe5.l50.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:51:29Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_xrgtzqe5.l50.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:51:29 +0000 UTC |
2025-08-17 06:51:29 +0000 UTC |
|
|
|
2025-08-17 06:51:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8cfdf2a28b4b2141ed76efdb646aff13e98839e0899c6adb3251d869435c7f62 |
[68a31b06388be01815425c5c] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:22:28Z] |
[5101faab8397e7d7a6a747b7b23e1120] |
[a3b33248c78cd3c905ae66c5435c2eb59feaac5d] |
[bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8] |
[379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2199 |
5101faab8397e7d7a6a747b7b23e1120 |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 12:22:27 +0000 UTC |
a3b33248c78cd3c905ae66c5435c2eb59feaac5d |
bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8 |
379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334 |
2025-08-18 12:22:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 87e9dadb6f2dafe4516df3207431d866f6523092fea13c70bb87a04ac2ca874a |
[68a46900de52a0eb07bb2cac] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_2c7bdf88483841c991f97ab70ee180cb.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:07:26Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_2c7bdf88483841c991f97ab70ee180cb.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:07:28 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 87eced5a13c1c768b4afba0c29a797300d938b5c42cd9b9b8f1009381036335c |
[68a2841dea878ec155eeabc0] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-071EF405-2DA4-4BF6-B3E2-9EEE181CBAE8\CitrixReceiverUpdater.exe] |
[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] |
[2025-08-18T01:35:00Z] |
[531d104b020b9f98268ff78dd349c950] |
[b163a90df0687f4e273d7df02eddf0f06f9089b4] |
[f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1] |
[e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
rm.bat |
C:\Users\teknicor\AppData\Local\Temp\4\ |
|
7357 |
531d104b020b9f98268ff78dd349c950 |
|
|
Not Signed |
2025-08-18 01:35:00 +0000 UTC |
2025-08-18 01:35:00 +0000 UTC |
b163a90df0687f4e273d7df02eddf0f06f9089b4 |
f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1 |
e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4 |
2025-08-18 01:38:37 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 87fa12deba87e8480e2f908b117c04f544a29ad84bfad78b06ff20e5e9457a90 |
[68a234114e9e68c09ff3b3ce] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_gdgv0db5.spm.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:56:58Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_gdgv0db5.spm.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:56:58 +0000 UTC |
2025-08-17 19:56:58 +0000 UTC |
|
|
|
2025-08-17 19:57:05 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8816ced466c6030ba2624ebacbae119f2d4acdba7debf14a74c73a97605385a5 |
[68a5239e621d09b2b1ed5e53] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackTest.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:36Z] |
[bc77c1c66df02372edd7ac4456a17bcf] |
[15712c630fd5da7ad894f532b3ace2694eb388c6] |
[1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c] |
[f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PlaybackTest.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Test |
16896 |
bc77c1c66df02372edd7ac4456a17bcf |
Test |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:06 +0000 UTC |
2023-06-15 02:38:06 +0000 UTC |
15712c630fd5da7ad894f532b3ace2694eb388c6 |
1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c |
f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 885e56d813268fca1e04e3c8d7292dc138ac4e188f7e61ea277d544a5c080f12 |
[68a31fecb457e7ec963d10ed] |
[2] |
[GreyBeard] |
[I-CAJump] |
[WVUHS] |
[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:42:24Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1 |
C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-14 17:50:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8985e9e94144b1fd71aa39a7df8f1857ef43cdfc56eb1974c97181b55345a895 |
[68a4631d55f0b006fedad271] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\u05q5u1z.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T11:42:16Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
u05q5u1z.dll |
C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 11:42:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 89c5baa3f3a41900e2d66d77c1e63a9dab11d2d6d5e556a169b8fa2097b8441b |
[68a4ccc785b914a60d739e47, 68a4ce1fc826337212f53be7, 68a4d07753a851daf11e6931, 68a4d07753a851daf11e6944, 68a4d07753a851daf11e6951, 68a4d2d1ff2b441b84428129, 68a4d2d1ff2b441b8442813c, 68a4d2d1ff2b441b84428149] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\Cwd.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] |
[06bfbbd1e8fc346fa3358461f084d535] |
[b979274e71278d1689608fbe3b5c639a3c334a55] |
[39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737] |
[d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Cwd.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\ |
|
15360 |
06bfbbd1e8fc346fa3358461f084d535 |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:01 +0000 UTC |
b979274e71278d1689608fbe3b5c639a3c334a55 |
39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737 |
d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 89ed47dd7a86c0556557c69fc7d6b6fc94c05116f55431bc6cb4e3731df5c1b0 |
[68a26fdfc0e2189e95b436e5] |
[2] |
[SYSTEM] |
[UH-APPS] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gqwsgxba.yiw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T00:12:05Z] |
[] |
[] |
[] |
[] |
[172.17.253.46] |
[172.17.253.46] |
1 |
Success |
__PSScriptPolicyTest_gqwsgxba.yiw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 00:12:05 +0000 UTC |
2025-08-18 00:12:05 +0000 UTC |
|
|
|
2025-08-18 00:12:15 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8f37ca61813533be820b0c6f27c1a9de68bbf3da928e6d7f2d4eeba4c98e7e33 |
[68a4a6605961c54c81f645c9] |
[2] |
[be10045eu] |
[i-nsdprodmon1] |
[WVUHS] |
[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:29:16Z] |
[0f76b414d248a467589b20404835e659] |
[79a088b56468ea7d8b28e19e914063eaa948d267] |
[1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304] |
[9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09] |
[172.17.252.208] |
[172.17.252.208] |
1 |
Success |
PC Info.ps1 |
\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ |
|
2058 |
0f76b414d248a467589b20404835e659 |
|
|
Not Signed |
2025-04-22 13:59:56 +0000 UTC |
2025-07-17 18:17:19 +0000 UTC |
79a088b56468ea7d8b28e19e914063eaa948d267 |
1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304 |
9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09 |
2025-08-19 16:29:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8f8b7214d2120fb1d73129fba6d1bd628b2ca29df4907461730b5e0a7edab93f |
[68a4ccc785b914a60d739e4b, 68a4ce1fc826337212f53bea, 68a4d07753a851daf11e6934, 68a4d07753a851daf11e6947, 68a4d2d1ff2b441b8442812c, 68a4d2d1ff2b441b8442813f] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setsite.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] |
[36475116d7add7e74ac00af1dd9878d5] |
[240dc97909a4dd7ecd8f512611ca18c25fead0b3] |
[a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe] |
[85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite.cmd |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\ |
|
892 |
36475116d7add7e74ac00af1dd9878d5 |
|
|
Not Signed |
2021-10-20 13:41:06 +0000 UTC |
2016-12-02 07:17:44 +0000 UTC |
240dc97909a4dd7ecd8f512611ca18c25fead0b3 |
a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe |
85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8aa7a83d12cd1daa9a802e686463263e91cb813627557b01861a89e27fde4b09 |
[68a2532c678a2fdf8182be04] |
[2] |
[sunrisebackup] |
[CI1BEFS3] |
[WHI] |
[D:\archivescript\archive.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T22:00:01Z] |
[ddf4199c681ada910f8e2a61d9af3fe8] |
[e2e6b93f0619b5ab8141ee4886f87eca40482d09] |
[5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a] |
[3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31] |
[172.18.112.86] |
[172.18.112.86] |
1 |
Success |
archive.ps1 |
D:\archivescript\ |
|
5996 |
ddf4199c681ada910f8e2a61d9af3fe8 |
|
|
Not Signed |
2019-09-16 18:21:57 +0000 UTC |
2015-04-22 19:31:33 +0000 UTC |
e2e6b93f0619b5ab8141ee4886f87eca40482d09 |
5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a |
3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31 |
2025-08-08 22:00:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8b238948f852008a05ed3de256fe08c00bd98db5643b0edd083017ec744424d1 |
[68a2b38b161afab772184bd5] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\tmp_2kca3ybv.gtw.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T05:00:54Z] |
[ae19d72b75e92e2a670f857ba9860ce3] |
[e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a] |
[e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377] |
[2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmp_2kca3ybv.gtw.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\ |
|
4669570 |
ae19d72b75e92e2a670f857ba9860ce3 |
|
|
Not Signed |
2025-08-18 05:00:54 +0000 UTC |
2025-08-18 05:00:54 +0000 UTC |
e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a |
e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377 |
2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715 |
2025-08-18 05:00:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8b2bded6ab6979a63c277f41c62e15937dc5403fc74f17f14fa371316759700c |
[68a166b2de4e1d2a0ca2c54c] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_buqznmts.ghk.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:20:40Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_buqznmts.ghk.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:20:40 +0000 UTC |
2025-08-17 05:20:40 +0000 UTC |
|
|
|
2025-08-17 05:20:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8b2c4068b2411da1c364ab97163a8b222ba8452c911c51c6799afb17c5b66d6a |
[68a46fd7a5344f430966555f, 68a4728c1dfbce27769ea0bf] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\software\Storage Manager Data Collector 20.1.2.14.exe] |
[Servers] |
[Servers Audit] |
[v2272] |
["C:\software\Storage Manager Data Collector 20.1.2.14.exe" ] |
[Not Signed] |
[C:\Windows\explorer.exe] |
[C:\Windows\System32\userinit.exe] |
[2025-08-19T12:36:02Z, 2025-08-19T12:39:10Z] |
[61a2de8ddb935edca1d78ad7774a2c7b] |
[6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e] |
[97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9] |
[6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
Storage Manager Data Collector 20.1.2.14.exe |
C:\software\ |
Dell SupportAssist Services |
2042852084 |
61a2de8ddb935edca1d78ad7774a2c7b |
Dell Storage Manager Data Collector |
20.1.2.14 |
Not Signed |
2025-08-19 12:31:10 +0000 UTC |
2022-08-17 14:32:05 +0000 UTC |
6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e |
97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9 |
6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b |
2025-08-19 12:36:39 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8b6279297001a9f437b91303e1df24a03523664479215afb83a74924917f22c5 |
[68a31fe2fad6bdf6009b0cd2] |
[2] |
[GreyBeard] |
[I-CAJump] |
[WVUHS] |
[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:42:24Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1 |
C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 12:43:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8c1ae98ab13bcbc9125b8c981a49c1d6d8b99ad4762922177b96e68c27654c08 |
[68a27b48e4b19da253904f3e] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\tmpEXO_wjcpfw15.dhs.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T01:00:50Z] |
[f85e53c7484a4249bc2823f1a02afcdb] |
[7f875190fcfa319ef524f04ca2b59d97c4d659d7] |
[fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf] |
[fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_wjcpfw15.dhs.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\ |
|
2290479 |
f85e53c7484a4249bc2823f1a02afcdb |
|
|
Not Signed |
2025-08-18 01:00:48 +0000 UTC |
2025-08-18 01:00:48 +0000 UTC |
7f875190fcfa319ef524f04ca2b59d97c4d659d7 |
fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf |
fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600 |
2025-08-18 01:00:56 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8c1db5e7aa9c9ad5d76b4f1f7d522b7b17092332d4995fc2392518f78174d13e |
[68a523949cec397f02de9f5f] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Interfaces.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:30Z] |
[973212aa3cb7ab0a2a17074bc5ba69d9] |
[6d85906a470dd27d48a2db0c4c948479b85be40b] |
[6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc] |
[cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Interfaces.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
4608 |
973212aa3cb7ab0a2a17074bc5ba69d9 |
|
1.0.8565.40718 |
Not Signed |
2023-06-15 02:37:18 +0000 UTC |
2023-06-15 02:37:18 +0000 UTC |
6d85906a470dd27d48a2db0c4c948479b85be40b |
6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc |
cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8c679263a27fbd607ce7190c8ea323b7ae362030e79a1ebba95720cdcdaa6e55 |
[68a289dc0e6a21d30c5fa31d] |
[2] |
[SYSTEM] |
[U-NKRONOSWEB2] |
[NT AUTHORITY] |
[C:\Kronos\openfire\ns\bin\stop.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\cmd.exe] |
[C:\Kronos\openfire\ns\bin\openfireService.exe] |
[2025-08-18T02:00:00Z] |
[6531a0177f81fedbb09ed25c3416e3d7] |
[01743b37aa19e8ceae417626bf209d4c7a5c06f9] |
[39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e] |
[dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615] |
[172.25.16.7] |
[172.25.16.7] |
1 |
Success |
stop.bat |
E:\kronos\openfire\ns\bin\ |
|
932 |
6531a0177f81fedbb09ed25c3416e3d7 |
|
|
Not Signed |
2021-10-18 22:31:05 +0000 UTC |
2021-07-02 12:32:35 +0000 UTC |
01743b37aa19e8ceae417626bf209d4c7a5c06f9 |
39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e |
dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615 |
2025-07-22 23:34:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8c720b6172950507ce095cf5a651cf3cb8e8a2aa959c0144c3f29c540aaef910 |
[68a3146b5f0c41860c8c8512, 68a3146b5f0c41860c8c8565] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\_policybase.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[eebd4f03df5dd13bbf7b36b967e78312] |
[65ddc336de7d067cd0a6459879a7c9554ba794dd] |
[2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2] |
[0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_policybase.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
17969 |
eebd4f03df5dd13bbf7b36b967e78312 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
65ddc336de7d067cd0a6459879a7c9554ba794dd |
2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2 |
0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8c9c462d5ce63854cb4ab58308f8210a5e659263270c98b847c1d02ba9284d33 |
[68a1a4c40fc81084514a3a33] |
[2] |
[SYSTEM] |
[u-devsqltest1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ehq3f2rs.q1x.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:45:34Z] |
[] |
[] |
[] |
[] |
[172.25.17.220] |
[172.25.17.220] |
1 |
Success |
__PSScriptPolicyTest_ehq3f2rs.q1x.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:45:34 +0000 UTC |
2025-08-17 09:45:34 +0000 UTC |
|
|
|
2025-08-17 09:45:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8cb7e004d91df55955d29932d6578e0c045c059763678afd3bedd01b7239c9ff |
[68a4ccc785b914a60d739e51, 68a4ce1fc826337212f53bee, 68a4d07753a851daf11e6939, 68a4d07753a851daf11e694f, 68a4d2d1ff2b441b84428131, 68a4d2d1ff2b441b84428147] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\Util.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[63f02e1f06bcce8dfbafcf35d21a4fdf] |
[81c04431647158995a1e96a1d4cb422363e86f2d] |
[8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00] |
[fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Util.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\ |
|
38400 |
63f02e1f06bcce8dfbafcf35d21a4fdf |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:35 +0000 UTC |
81c04431647158995a1e96a1d4cb422363e86f2d |
8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00 |
fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8ccb8e7fc8941394c60374d45ba4a1539b1bd3b1d798142e8705eb4dcd391265 |
[68a22721aa3b1f3dd3941512] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\tmp_4dvp2nbj.c5a.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T19:01:51Z] |
[9c8e384aff95c5d7fe6b82325ac590ee] |
[a8d27f4a6211fb079c6f04717fe31e0fac54fc3c] |
[82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b] |
[e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmp_4dvp2nbj.c5a.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\ |
|
4669542 |
9c8e384aff95c5d7fe6b82325ac590ee |
|
|
Not Signed |
2025-08-17 19:01:49 +0000 UTC |
2025-08-17 19:01:49 +0000 UTC |
a8d27f4a6211fb079c6f04717fe31e0fac54fc3c |
82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b |
e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007 |
2025-08-17 19:01:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 930b1b9c71a3c5e16852cb23eaa4b624d9cfd50f4730ace88b34f3a2e0cc80f4 |
[68a38868065f0a2246a5fd5e] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dxct1uzy.sdn.ps1] |
[Servers] |
[Servers Audit] |
[v2269.866] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T20:09:06Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_dxct1uzy.sdn.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 20:09:06 +0000 UTC |
2025-08-18 20:09:06 +0000 UTC |
|
|
|
2025-08-18 20:09:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 934ef5c14e218db7b86847cb7e8e5a2b985ccfa55c27805c72d8c3fb5103cfb4 |
[68a2369b3b43e7f02650554c] |
[2] |
[SYSTEM] |
[u-hvhprod12] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nz35alhg.5g5.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:07:42Z] |
[] |
[] |
[] |
[] |
[172.25.19.217] |
[172.25.19.217] |
1 |
Success |
__PSScriptPolicyTest_nz35alhg.5g5.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:07:42 +0000 UTC |
2025-08-17 20:07:42 +0000 UTC |
|
|
|
2025-08-17 20:07:55 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 94e7408b722334f3631567ac6d326877568d1d35e377a0e1a2d601cbcca0ad6c |
[68a3146b5f0c41860c8c84ec, 68a3146b5f0c41860c8c854d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\queue.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[20c4f8397302a02b31f63b5ee9bd03a3] |
[76fd6d3949fd58da5a7e6f95a5938dccb396c415] |
[635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506] |
[9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
queue.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
17359 |
20c4f8397302a02b31f63b5ee9bd03a3 |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
76fd6d3949fd58da5a7e6f95a5938dccb396c415 |
635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506 |
9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 95110c1a469b7d9b3827ddb372ed092836c8321395b9c25ba549b5dda9fbbed3 |
[68a34b98a6132bf659cce5ad, 68a34df0b71eea1289980a12] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Common.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z] |
[408f1dc91e0b03f6f257c34bdbc09d01] |
[d5a3758015b9885cb698065828a86628665aa3ad] |
[039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f] |
[9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.Common.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Common Library |
564736 |
408f1dc91e0b03f6f257c34bdbc09d01 |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:02:40 +0000 UTC |
2023-04-26 15:02:40 +0000 UTC |
d5a3758015b9885cb698065828a86628665aa3ad |
039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f |
9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d |
2025-05-13 05:13:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8d423d38d1d19e45323c114230bc1dbb9cf712c19a3b91b1d4cc7f034e4212de |
[68a230dc4f444eddb4af5547] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w3bfksit.znv.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:43:21Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_w3bfksit.znv.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:43:21 +0000 UTC |
2025-08-17 19:43:21 +0000 UTC |
|
|
|
2025-08-17 19:43:24 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8d6314b0b132e4f90c614e0da514145f33cd612c61de6625846d0e3a851a8526 |
[68a1948400572dc6e953eac7] |
[2] |
[SYSTEM] |
[nt-compass5] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_v0hjxpqk.y0v.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:36:09Z] |
[] |
[] |
[] |
[] |
[172.29.172.3] |
[172.29.172.3] |
1 |
Success |
__PSScriptPolicyTest_v0hjxpqk.y0v.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:36:09 +0000 UTC |
2025-08-17 08:36:09 +0000 UTC |
|
|
|
2025-08-17 08:36:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8dcc9eb968c2c9db5ba7f8ceed8ba69324b28b276c40c0df325ac6a22b5314f5 |
[68a523949cec397f02de9f51] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DataModel.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:28Z] |
[87329721b4c0dfe9032c6801df4da2dd] |
[2b3ebb3cbb2c964cb1dd4c6a953115785530cca2] |
[4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23] |
[c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
DataModel.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
DataModel |
28672 |
87329721b4c0dfe9032c6801df4da2dd |
DataModel |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:10 +0000 UTC |
2023-06-15 02:37:10 +0000 UTC |
2b3ebb3cbb2c964cb1dd4c6a953115785530cca2 |
4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23 |
c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8ec0f3a5ed337c7cef9440f6ab170b140a44a3671f9c409ada11974538bdc872 |
[68a4ccc785b914a60d739e56, 68a4ce1fc826337212f53bf3, 68a4d07753a851daf11e693e, 68a4d07753a851daf11e6955, 68a4d2d1ff2b441b84428136, 68a4d2d1ff2b441b8442814d] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\arybase.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[99b820a26387f39d63e59b64748df4ec] |
[bd55986771d861f6ab5bcac33eec5c539e7164db] |
[17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f] |
[8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
arybase.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\ |
|
17408 |
99b820a26387f39d63e59b64748df4ec |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:57 +0000 UTC |
bd55986771d861f6ab5bcac33eec5c539e7164db |
17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f |
8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8ed706d5ea69cb373505d2daa3f582641f725f565983408eb2c8dbacc6d06c1a |
[68a1de82fe6f5faa447d1ddd] |
[2] |
[SYSTEM] |
[I-NCTXSA-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qm1pal05.wis.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:51:56Z] |
[] |
[] |
[] |
[] |
[172.17.188.22] |
[172.17.188.22] |
1 |
Success |
__PSScriptPolicyTest_qm1pal05.wis.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:51:56 +0000 UTC |
2025-08-17 13:51:56 +0000 UTC |
|
|
|
2025-08-17 13:52:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8f0151b909447385ff1d147edb39dbcf485b0950c3a987002149e05f7297575c |
[68a523949cec397f02de9f52] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsControl.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:28Z] |
[0c03cf54e4169918390fc3695ced37ad] |
[015ca7f33d308f2e835115ae9aaf496acc3f6869] |
[0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2] |
[49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
DiagnosticsControl.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Control |
5632 |
0c03cf54e4169918390fc3695ced37ad |
Control |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:08 +0000 UTC |
2023-06-15 02:38:08 +0000 UTC |
015ca7f33d308f2e835115ae9aaf496acc3f6869 |
0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2 |
49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 989ec9cc45afa5d70a781bf3c041eef2cf9b3a15b63b30448e8086f98d1efafb |
[68a4709fa6c6568ae291d430] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ISSetup.dll] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\software\Storage Manager Data Collector 20.1.2.14.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:39:56Z] |
[8656d6fdd16ca1d6e9155383064f43db] |
[1b21d73c29fc305a870b33b76d3aa997e45adc4a] |
[3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd] |
[3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
ISSetup.dll |
C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ |
InstallShield (R) Setup Engine |
3583048 |
8656d6fdd16ca1d6e9155383064f43db |
InstallShield |
22.0 |
Not Signed |
2025-08-19 12:39:56 +0000 UTC |
2025-08-19 12:39:56 +0000 UTC |
1b21d73c29fc305a870b33b76d3aa997e45adc4a |
3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd |
3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d |
2025-08-19 12:39:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 98c5823148a8173192ad3c72d9f4ea39c6c9f246fdbbaa0951d52c0c5f8e77b8 |
[68a5239e621d09b2b1ed5e56] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\RecordingsGUI.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:37Z] |
[8a5f1e57ae11d28423d76cb656a26c7d] |
[442bc003f5180cc49734aa713f71766826622f60] |
[7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e] |
[f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
RecordingsGUI.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
RecordingsGUI |
51200 |
8a5f1e57ae11d28423d76cb656a26c7d |
RecordingsGUI |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:54 +0000 UTC |
2023-06-15 02:37:54 +0000 UTC |
442bc003f5180cc49734aa713f71766826622f60 |
7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e |
f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 98c7fa6109742b02106c96b2b99c72c0fefafae342651a8872b0796d11288b15 |
[68a46327817fe25f39e81a94] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\tmp_4a4ji0dj.v0h.psm1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T11:42:27Z] |
[a8a00094ca4d0ea2312187e43d5354ee] |
[6567ea2e3352de1259d836237c57870a171d2ef4] |
[d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c] |
[fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmp_4a4ji0dj.v0h.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\ |
|
4669944 |
a8a00094ca4d0ea2312187e43d5354ee |
|
|
Not Signed |
2025-08-19 11:42:27 +0000 UTC |
2025-08-19 11:42:27 +0000 UTC |
6567ea2e3352de1259d836237c57870a171d2ef4 |
d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c |
fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7 |
2025-08-19 11:42:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 98ca15715d87f7d35a7756ea9bcfdbe3767ed4163fb017d675587792a3152fea |
[68a4cf29dfc75d42acc2fee6] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:23:10Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:23:21 +0000 UTC |
[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 98df3078f3f8bc3b2cd2b8ee77cb6c1b2ed806a39bbacb1384ae9efc24d9189f |
[68a3146b5f0c41860c8c84e9, 68a3146b5f0c41860c8c851d] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\encodings\__pycache__\cp1252.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] |
[fa5b299bcf803667db7c4c48d05a08df] |
[e854bca592b85a87408e883fb8ec1bbddee34662] |
[bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481] |
[4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
cp1252.cpython-313.pyc |
C:\Program Files\Python\Lib\encodings\__pycache__\ |
|
3299 |
fa5b299bcf803667db7c4c48d05a08df |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
e854bca592b85a87408e883fb8ec1bbddee34662 |
bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481 |
4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 90812f7b5c7f20d66571d9443f189b21105bcb1623cc4f53e465e092c616b667 |
[68a18597b6a5f761a88cfa32, 68a2d8ecf31eeab05c2823c5, 68a428c2b79a1ebc024dfc24, 68a57a5ae65234fd31d524a1] |
[2] |
[hppc] |
[uvOSCCN2] |
[UVOSCCN2] |
[C:\bin\OsccBackup.cmd] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:30:25Z, 2025-08-18T07:30:24Z, 2025-08-19T07:30:24Z, 2025-08-20T07:30:25Z] |
[c799558e2a940cce61ff908c235a04ef] |
[e991cadd79ff635a53623530e85eeb7b958ee0cc] |
[7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e] |
[46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228] |
[172.25.18.157] |
[172.25.18.157] |
1 |
Success |
OsccBackup.cmd |
C:\bin\ |
|
2975 |
c799558e2a940cce61ff908c235a04ef |
|
|
Not Signed |
2022-05-08 10:28:02 +0000 UTC |
2022-05-08 10:28:59 +0000 UTC |
e991cadd79ff635a53623530e85eeb7b958ee0cc |
7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e |
46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228 |
2025-08-09 07:30:28 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 90d4051cf517ac7bbe8c79ad0c4ec7f4649ce5ab42959aad199aa9cd94b1b87b |
[68a34b98a6132bf659cce5c2, 68a34df0b71eea1289980a27] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Medeco.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:20Z, 2025-08-18T15:58:10Z] |
[732c49ecabd8c6c5a5c7681a37b0fc1b] |
[cc60b5a4ed985f4a278f5a9d213069668e158fb6] |
[428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1] |
[35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.Medeco.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Medeco Integration |
163328 |
732c49ecabd8c6c5a5c7681a37b0fc1b |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:02:34 +0000 UTC |
2023-04-26 15:02:34 +0000 UTC |
cc60b5a4ed985f4a278f5a9d213069668e158fb6 |
428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1 |
35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef |
2025-05-13 05:13:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 91120b1794849724fc9ad653ec6607ac3f1c69a20e5b813ed9691b465f3deb06 |
[68a1de00310078f5309be0d1] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0qhxxeok.d1t.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:49:44Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_0qhxxeok.d1t.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:49:44 +0000 UTC |
2025-08-17 13:49:44 +0000 UTC |
|
|
|
2025-08-17 13:49:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9112c932f1ebb8bb91402140bcb506afc616bc2f94c27daebed1975ab396c6ea |
[68a5d0d993ef7c7d1206147e] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_rojnfgz1.5of.ps1] |
[Servers] |
[Servers Audit] |
[v2291.881] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:42:41Z] |
[82750d3658af09bec0468e8d3ce2aeb1] |
[85d51df1579e58a1cb11665ee95e4858850d8401] |
[b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e] |
[9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_rojnfgz1.5of.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ |
|
80 |
82750d3658af09bec0468e8d3ce2aeb1 |
|
|
Not Signed |
2025-08-20 13:42:41 +0000 UTC |
2025-08-20 13:42:41 +0000 UTC |
85d51df1579e58a1cb11665ee95e4858850d8401 |
b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e |
9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23 |
2025-08-20 13:42:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 917ab3848c77e9593866c25b4b135e29b394f91214d295074a9dcbb07592d16b |
[68a524b7d65490728dc99895] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wsefqq2c.g5h.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T01:28:13Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_wsefqq2c.g5h.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 01:28:13 +0000 UTC |
2025-08-20 01:28:13 +0000 UTC |
|
|
|
2025-08-20 01:28:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 918cae3b9be1ee964521f29f95df80ca661f04fbfd790717c2bf044354d93d05 |
[68a19bf9f9fa0cbc93a3e18c] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xkmgggns.rsj.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:08:04Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_xkmgggns.rsj.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:08:04 +0000 UTC |
2025-08-17 09:08:04 +0000 UTC |
|
|
|
2025-08-17 09:08:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 91ff3783187c447417b1e043d6548c6afd0bb6d23f08d61fd02459bae9712a45 |
[68a32e4676197e42f5a2fbd5, 68a45c02fdc422fb7bc1af75] |
[2] |
[SYSTEM] |
[i-vCUACPub] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\AACM.dll] |
[Servers] |
[Servers Audit] |
[v2253.852, v2272.867] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T13:38:25Z, 2025-08-19T11:02:01Z] |
[65acd3aadd460333cdf00b7aa3496083] |
[409f060afc9596b65a39165598013d9f3c666d1c] |
[2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0] |
[b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6] |
[172.17.196.36] |
[172.17.196.36] |
1 |
Success |
AACM.dll |
C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\ |
Cisco Unified Attendant Console |
6745088 |
65acd3aadd460333cdf00b7aa3496083 |
Cisco Unified Attendant Console Advanced |
WEB 12.0.5.1823 |
Not Signed |
2019-07-19 18:20:02 +0000 UTC |
2019-07-19 18:20:02 +0000 UTC |
409f060afc9596b65a39165598013d9f3c666d1c |
2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0 |
b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6 |
2025-05-15 16:47:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 923528caae4b397941a4cc7d31559130c34e624b777748c1711b22c6b1075878 |
[68a311cdc2d0d6e3eb77f21a] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AD_Direct_reports.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[09cd0b51ba652e8b8f7a8f4156940364] |
[6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57] |
[a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b] |
[62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
AD_Direct_reports.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
3119 |
09cd0b51ba652e8b8f7a8f4156940364 |
|
|
Not Signed |
2023-08-21 12:44:06 +0000 UTC |
2025-06-13 14:43:10 +0000 UTC |
6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57 |
a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b |
62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 93012784c597277ba019572d4a60fc2b45f437fe68c39635b35ffdfb87b1bb13 |
[68a5cc2091727380a40e2b0d] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\233afcee-6ced-4993-9401-b562fb70f217.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:31Z] |
[b88f41bbc1e02900c47403eea28a10ea] |
[9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552] |
[c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334] |
[904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
233afcee-6ced-4993-9401-b562fb70f217.ps1 |
C:\_work_devops_mdi\_temp\ |
|
790 |
b88f41bbc1e02900c47403eea28a10ea |
|
|
Not Signed |
2025-08-20 13:22:30 +0000 UTC |
2025-08-20 13:22:30 +0000 UTC |
9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552 |
c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334 |
904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e |
2025-08-20 13:22:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9b4a8557217fe93c3a274d301e45c3f93caeb36f89b720a5f42ac34f7d27cd88 |
[68a472b1b022648922e235ae] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xercesImpl-2.9.1.jar] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] |
[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] |
[2025-08-19T12:48:45Z] |
[da09b75b562ca9a8e9a535d2148be8e4] |
[1136d197e2755bbde296ceee217ec5fe2917477b] |
[3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a] |
[37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
xercesImpl-2.9.1.jar |
C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ |
|
1229289 |
da09b75b562ca9a8e9a535d2148be8e4 |
|
|
Not Signed |
2021-12-22 04:48:40 +0000 UTC |
2021-12-22 04:48:40 +0000 UTC |
1136d197e2755bbde296ceee217ec5fe2917477b |
3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a |
37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435 |
2025-08-19 11:29:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9b79b047ffcabcd68e19e7888c0cec805364b59493bf0434b1ef282004936da0 |
[68a354c3f5d774cd6ae7dfaa] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe] |
[Servers] |
[Servers Audit] |
[v2259.858] |
["C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe" ] |
[Not Signed] |
[C:\Windows\explorer.exe] |
[C:\Windows\System32\userinit.exe] |
[2025-08-18T16:28:48Z] |
[8f6ab8f8e345c8442395fc1e94abf53c] |
[7437ec517002030fd0499496eb4e4c06399057a8] |
[da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40] |
[e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
PanelUtil.exe |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Panel Utility |
290304 |
8f6ab8f8e345c8442395fc1e94abf53c |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:03:10 +0000 UTC |
2023-04-26 15:03:10 +0000 UTC |
7437ec517002030fd0499496eb4e4c06399057a8 |
da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40 |
e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2 |
2025-08-18 16:28:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9c26250cf5f231965e4dd9ee1b71e0e324551b86e64fbce130341ef3f2a47608 |
[68a164c5390404f85b716adc, 68a2b64cfd812c7de4e545af, 68a408129f3185cbaca3c5ca, 68a559bf118aff08c8ed4943] |
[2] |
[SYSTEM] |
[i-vroggera] |
[NT AUTHORITY] |
[C:\icm\pcce\la\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z] |
[e95e27be69f2216256a8ccf328a5ac17] |
[39cb921aee036bf1584b9509ee9151157810659f] |
[edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2] |
[0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287] |
[172.17.196.42] |
[172.17.196.42] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\la\bin\ |
|
406 |
e95e27be69f2216256a8ccf328a5ac17 |
|
|
Not Signed |
2021-10-07 20:03:35 +0000 UTC |
2021-10-07 20:03:35 +0000 UTC |
39cb921aee036bf1584b9509ee9151157810659f |
edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2 |
0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9c269c3ccae8cdfd948a0ad38c2b7f1bf344ae0d021c265ab3e58b957b590831 |
[68a233fd88f628d5134f0d74] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ea0bsm2n.vub.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:56:37Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_ea0bsm2n.vub.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:56:37 +0000 UTC |
2025-08-17 19:56:37 +0000 UTC |
|
|
|
2025-08-17 19:56:45 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9c4b5ce1dc29be4d5b9dddab220de247696495cf359c659d98e4a8faec482df8 |
[68a501fb7a753eb605659393] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\q0440fxp.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-19T23:00:04Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
q0440fxp.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 23:00:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 95feb7eb3e3ecf712806fd2a8be19bdd62c76ef7862756398639298a88f7cae0 |
[68a523949cec397f02de9f58] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ExcitersDiagPlugIn.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:29Z] |
[159dbdfc8777d46c067121e0c063c16f] |
[039bdf8d9e0ab6315b08c9564545dd6f3cd1a574] |
[fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155] |
[e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ExcitersDiagPlugIn.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
ExcitersDiagPlugIn |
18944 |
159dbdfc8777d46c067121e0c063c16f |
ExcitersDiagPlugIn |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:02 +0000 UTC |
2023-06-15 02:38:02 +0000 UTC |
039bdf8d9e0ab6315b08c9564545dd6f3cd1a574 |
fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155 |
e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9647877a7e4fdb83bbda5a2173ff9135b2a52d3d083c444ca8af53f35f2d4837 |
[68a1d738c11dd0afce1560b6, 68a328b63412995838d5c362] |
[2] |
[SYSTEM] |
[ITC-RODC-1] |
[NT AUTHORITY] |
[C:\Program Files\Npcap\CheckStatus.bat] |
[Servers] |
[Servers Audit] |
[v2248, v2253] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T13:11:09Z, 2025-08-18T13:11:05Z] |
[c1a174f329ffa8b331f6fc4fe6ab42f6] |
[47e61c26d8e04ebdf10dc2a848f7479ec31bd752] |
[a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c] |
[4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076] |
[172.17.20.198] |
[172.17.20.198] |
1 |
Success |
CheckStatus.bat |
C:\Program Files\Npcap\ |
|
880 |
c1a174f329ffa8b331f6fc4fe6ab42f6 |
|
|
Not Signed |
2020-09-25 03:12:08 +0000 UTC |
2020-09-25 03:12:08 +0000 UTC |
47e61c26d8e04ebdf10dc2a848f7479ec31bd752 |
a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c |
4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076 |
2025-04-17 02:20:31 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 966b014872df2b10771a6d6599d9eec4fd8d07864b4640d6e4292d0ee2318cd3 |
[68a19d4d339a5398da5a5181] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zolibxmz.drt.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:13:44Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_zolibxmz.drt.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:13:44 +0000 UTC |
2025-08-17 09:13:44 +0000 UTC |
|
|
|
2025-08-17 09:13:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 975ea175eadfdf66d1737a5bba6259c1d7645ef6e366d2065c42a537522f9e74 |
[68a16fe817c245683297ce48] |
[2] |
[SQLSERVERAGENT] |
[SUNR1MSD] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_sasv0xj3.dj0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] |
[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] |
[2025-08-17T06:00:01Z] |
[] |
[] |
[] |
[] |
[172.24.20.7] |
[172.24.20.7] |
1 |
Success |
__PSScriptPolicyTest_sasv0xj3.dj0.ps1 |
C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:00:01 +0000 UTC |
2025-08-17 06:00:01 +0000 UTC |
|
|
|
2025-08-17 06:00:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 98785b23979f24fe0b15bb479bcb033372f10e9633e1a69522168b6a35b14392 |
[68a523949cec397f02de9f41] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AEMDictionary.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:24Z] |
[f3f4cfa0df21c55ead9c48d0dfa26574] |
[6ea7f80899194a24fbf750c0551fc6be488c11eb] |
[80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4] |
[4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
AEMDictionary.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
286720 |
f3f4cfa0df21c55ead9c48d0dfa26574 |
|
1.0.8565.40716 |
Not Signed |
2023-06-15 02:37:16 +0000 UTC |
2023-06-15 02:37:16 +0000 UTC |
6ea7f80899194a24fbf750c0551fc6be488c11eb |
80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4 |
4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9dfb220bb3f348f33dc86e0fc936db0ca2efc1a3789c9e1121cb512ec33077fa |
[68a17ca68feea10e77a5fb6a] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1x2unr4g.5ni.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:54:25Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_1x2unr4g.5ni.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:54:25 +0000 UTC |
2025-08-17 06:54:25 +0000 UTC |
|
|
|
2025-08-17 06:54:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9f6dc00e7d0000006079d5e2ce106967e2ebc046d4a9f8e041b02d6264831b71 |
[68a4cc1d3f45e81aa92ef529] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[D:\CARDDAS\Backend\bin\GEHC.XI.Shared.Formulas.Globals.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[D:\CARDDAS\Backend\bin\GESCProcess.exe] |
[D:\CARDDAS\Backend\bin\GEServiceController.exe] |
[2025-08-19T19:10:14Z] |
[c06ed6d1d0a7c4eb01cd24bdc80fc3a2] |
[eccd928e1bc57300c08c04737cc9e896d0cbd3f3] |
[9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77] |
[a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
GEHC.XI.Shared.Formulas.Globals.dll |
D:\CARDDAS\Backend\bin\ |
GEHC.XI.Shared.Formulas.Globals |
30208 |
c06ed6d1d0a7c4eb01cd24bdc80fc3a2 |
Centricity Cardio Workflow |
1.0.0.0 |
Not Signed |
2021-10-13 16:45:46 +0000 UTC |
2020-12-02 02:05:25 +0000 UTC |
eccd928e1bc57300c08c04737cc9e896d0cbd3f3 |
9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77 |
a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168 |
2025-08-19 19:10:21 +0000 UTC |
[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 994a611ef09f8ae2fe98c2da01d655ce4fa347baa82b9c9915df9f6ec9fbfbc3 |
[68a523a99ba7c92b34976f9c] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Utils.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:43Z] |
[c709df517b83ce6b8dc1fea8d595054b] |
[8f53280dfe52874cff44f8780c0fc0fc115b5f3e] |
[dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490] |
[9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Utils.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
7168 |
c709df517b83ce6b8dc1fea8d595054b |
|
1.0.8565.40718 |
Not Signed |
2023-06-15 02:37:18 +0000 UTC |
2023-06-15 02:37:18 +0000 UTC |
8f53280dfe52874cff44f8780c0fc0fc115b5f3e |
dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490 |
9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9a3726ca46e5c03f051771dcde4dfb6ee31c3552a7a345655c5a916280a5fca0 |
[68a5f3b29b9fb9b13e357cc3] |
[2] |
[svc_methinks] |
[i-hMeThinks] |
[WVUHS] |
[C:\Users\svc_methinks\AppData\Local\Temp\1\8ca4fc1b-e498-4c03-ae74-6a16073d35b4.tmp.node] |
[Servers] |
[Servers Audit] |
[v2306] |
[] |
[Not Signed] |
[C:\Program Files\Docker\Docker\frontend\Docker Desktop.exe] |
[C:\Program Files\Docker\Docker\resources\com.docker.backend.exe] |
[2025-08-20T16:01:57Z] |
[595808a5981c518e408b20db02c91182] |
[e039562b6f463711ed9c3ad8ac499d813afdf966] |
[df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86] |
[f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121] |
[172.17.251.218] |
[172.17.251.218] |
1 |
Success |
9c93f735-e0b0-426b-830a-650d88cf56a5.tmp.node |
C:\Users\svc_methinks\AppData\Local\Temp\1\ |
|
155136 |
595808a5981c518e408b20db02c91182 |
|
|
Not Signed |
2025-07-16 16:01:47 +0000 UTC |
2025-07-16 16:01:47 +0000 UTC |
e039562b6f463711ed9c3ad8ac499d813afdf966 |
df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86 |
f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121 |
2025-07-16 16:01:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9a933035d08791e2782f9d3b15447d9d39970442a998a1bc5b1742acaa33f921 |
[68a46900de52a0eb07bb2cab] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:07:25Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:07:28 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9addd5904e11aac0c9314145f7a3571f0a6c6904a088475ff74610d4021f7188 |
[68a3c3516dcf6e4208aef621] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-3A9C2E87-DA60-427D-B80A-82DC7674B69E\CitrixReceiverUpdater.exe] |
[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] |
[2025-08-19T00:17:04Z] |
[5b0b73b4180309831b886d262c2f581a] |
[07878f7908801a602bd37e6a7a6612369487387a] |
[fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6] |
[c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
rm.bat |
C:\Users\teknicor\AppData\Local\Temp\4\ |
|
7357 |
5b0b73b4180309831b886d262c2f581a |
|
|
Not Signed |
2025-08-19 00:17:04 +0000 UTC |
2025-08-19 00:17:04 +0000 UTC |
07878f7908801a602bd37e6a7a6612369487387a |
fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6 |
c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c |
2025-08-19 00:20:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9aedfab326d5e3f307d5205bfc6a53d1615990c94cfb16a8b223b9f97f6e0469 |
[68a16556adb18f56bab6ec7d, 68a2b4a8c289c4a5fdc2edb0, 68a4085529d877e962e90ae5, 68a557e71e5d7a1efef2595d] |
[2] |
[SYSTEM] |
[u-vpg1b] |
[NT AUTHORITY] |
[C:\icm\pcce\cg1B\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[80f96d46829afa7f40109f8216bf4750] |
[079dfe49b49dfa8d5f323413b49c7a077a5758ab] |
[7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e] |
[02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810] |
[172.25.196.36] |
[172.25.196.36] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\cg1B\bin\ |
|
410 |
80f96d46829afa7f40109f8216bf4750 |
|
|
Not Signed |
2021-10-07 20:05:32 +0000 UTC |
2021-10-07 20:05:32 +0000 UTC |
079dfe49b49dfa8d5f323413b49c7a077a5758ab |
7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e |
02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a131c59ce31216aa82e7546a4b29e1afce259d87212f7f5cdfddf2cfcba76cc5 |
[68a523949cec397f02de9f56] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventMechanism.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:29Z] |
[c159bbc0a5b7044ad2341d142bb49419] |
[f4677064145ae5286fa91bf3a06c3f0362c1f6cc] |
[4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4] |
[cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
EventMechanism.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
8192 |
c159bbc0a5b7044ad2341d142bb49419 |
|
1.0.8565.40737 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
f4677064145ae5286fa91bf3a06c3f0362c1f6cc |
4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4 |
cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a143f84acb242d2ae93165cf5caa808116878e47cb0686e9830bf9a0abb1fcd9 |
[68a1638d6b917cef7bc97208] |
[2] |
[insqadhocadmin] |
[inSQADHOC] |
[INSQADHOC] |
[D:\DxFlats\SQ-AdHoc.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:02Z] |
[bb3305a61952566315ce176436bd4621] |
[029fd1a6c08c26b003c740a134e6f98c79ad8496] |
[fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901] |
[f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c] |
[172.17.253.151] |
[172.17.253.151] |
1 |
Success |
SQ-AdHoc.ps1 |
D:\DxFlats\ |
|
83576 |
bb3305a61952566315ce176436bd4621 |
|
|
Not Signed |
2024-06-13 14:05:23 +0000 UTC |
2024-05-23 19:22:49 +0000 UTC |
029fd1a6c08c26b003c740a134e6f98c79ad8496 |
fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901 |
f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c |
2025-08-10 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a31ce0c5fb2fb5a70ae2f5675d2e718053ab5a33f61fe21ee4068a320772e549 |
[68a3263cd45919f0090e7c01] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_amguifg1.dah.ps1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T13:10:15Z] |
[] |
[] |
[] |
[] |
[172.17.146.3] |
[172.17.146.3] |
1 |
Success |
__PSScriptPolicyTest_amguifg1.dah.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 13:10:15 +0000 UTC |
2025-08-18 13:10:15 +0000 UTC |
|
|
|
2025-08-18 13:10:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a32017ae555c56a0e151a37d90e172e739a0be07eba0325f360d41187c2a4915 |
[68a3146b5f0c41860c8c8503, 68a3146b5f0c41860c8c8529] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\re\__pycache__\_compiler.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[3fe222e07defb25b338445dbcab0bfb9] |
[a105528d5535f8082be6782364ab5baaa5e0bfcb] |
[4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16] |
[f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_compiler.cpython-313.pyc |
C:\Program Files\Python\Lib\re\__pycache__\ |
|
26774 |
3fe222e07defb25b338445dbcab0bfb9 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
a105528d5535f8082be6782364ab5baaa5e0bfcb |
4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16 |
f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a324b6ad763bc358149289b8e56cf6af34165731120eac06b4c11545098abe80 |
[68a3344d439a37dcf9cca092] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rrmcis01.ufu.ps1] |
[Servers] |
[Servers Audit] |
[v2255.853] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T14:10:10Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_rrmcis01.ufu.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 14:10:10 +0000 UTC |
2025-08-18 14:10:10 +0000 UTC |
|
|
|
2025-08-18 14:10:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a35f7e2e854e0a9bec312d0e231257abf44ccd69ca8d4ce54a45a37c4b33e944 |
[68a3146b5f0c41860c8c84ee, 68a3146b5f0c41860c8c8544] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\warnings.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[7d85eaf7564ffaa1209cf036319c7ee9] |
[d08d019620615f931d936c43e8c10fe455351f14] |
[258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232] |
[50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
warnings.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
29539 |
7d85eaf7564ffaa1209cf036319c7ee9 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
d08d019620615f931d936c43e8c10fe455351f14 |
258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232 |
50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a3724c84c328061648a13640100576fa1495c17595531d32511c386cb89ad0d0 |
[68a523a99ba7c92b34976f9a] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingControl.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:42Z] |
[81bb796392271fdee395ef35a86dd765] |
[00289d1c9869b2ff54b9f6d773ba1a33719b7d1d] |
[0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828] |
[ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
UnderlyingControl.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
UnderlyingControl |
43520 |
81bb796392271fdee395ef35a86dd765 |
UnderlyingControl |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:40 +0000 UTC |
2023-06-15 02:37:40 +0000 UTC |
00289d1c9869b2ff54b9f6d773ba1a33719b7d1d |
0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828 |
ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9cdd435552e4798b104c63a8918b11cb96b5a4a7618907130342a4ffbd5a839a |
[68a2452ec0a888da2a3144f6] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1puaykw.vxr.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:09:53Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_s1puaykw.vxr.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:09:53 +0000 UTC |
2025-08-17 21:09:53 +0000 UTC |
|
|
|
2025-08-17 21:10:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9cdf0d9852f8c3557cfe9a6e3ee68cd450c4fc09bd2664d77bfa66af82c82726 |
[68a3146b5f0c41860c8c8525, 68a3146b5f0c41860c8c856e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\message.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] |
[1f9cf3f516b09dca73c5d70db0ae5491] |
[2b812bdaf15435914d726ada0f6149e822eba183] |
[d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa] |
[6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
message.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
51634 |
1f9cf3f516b09dca73c5d70db0ae5491 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
2b812bdaf15435914d726ada0f6149e822eba183 |
d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa |
6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9d111e03218a7eea9537a00e1863cddde10211dba9218b3d6b47608f1e77c251 |
[68a3146b5f0c41860c8c8540] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\_compression.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[af1c1193de59fb127d8911df425569ca] |
[6fd4756649e5aad5421b16a620fd166330c51cce] |
[a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1] |
[fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_compression.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
7813 |
af1c1193de59fb127d8911df425569ca |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
6fd4756649e5aad5421b16a620fd166330c51cce |
a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1 |
fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9d59e4a2f76cd64d5749bd32d2ff4b194967c71546ab94d1ac2a1883f9738c35 |
[68a1a56518d384e847176013] |
[2] |
[SYSTEM] |
[u-devsqltest1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ejhf5yxn.j5m.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:48:10Z] |
[] |
[] |
[] |
[] |
[172.25.17.220] |
[172.25.17.220] |
1 |
Success |
__PSScriptPolicyTest_ejhf5yxn.j5m.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:48:10 +0000 UTC |
2025-08-17 09:48:10 +0000 UTC |
|
|
|
2025-08-17 09:48:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9d97578780dbb03cc0c396200b96fce7e7645af7bafa5f5dc7fba849474f3c07 |
[68a5c8eceb9e7b7716dce203, 68a5ca39b5df6e9c598d9a15, 68a5ca39b5df6e9c598d9a22, 68a5ccf2ddfdba423e488638, 68a5ccf2ddfdba423e488646, 68a5ccf2ddfdba423e488654, 68a5ccf2ddfdba423e488661, 68a5ccf2ddfdba423e48866e, 68a5ccf2ddfdba423e48867b, 68a5ccf2ddfdba423e488688, 68a5ccf2ddfdba423e488695] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\powershell.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] |
[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] |
[774bf83f632cbecb715ee124673f4a07] |
[1af8f80e3fac45073288d420016eb0718463a2df] |
[1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016] |
[ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
powershell.ps1 |
C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ |
|
10213 |
774bf83f632cbecb715ee124673f4a07 |
|
|
Not Signed |
2025-08-20 13:08:38 +0000 UTC |
2024-01-20 18:07:08 +0000 UTC |
1af8f80e3fac45073288d420016eb0718463a2df |
1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016 |
ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9d9a4969ee818d3ab6eb78ee164b44f9376111d781e2bcd9b51f52b35898d341 |
[68a24268b7be513faed67bb0] |
[2] |
[SYSTEM] |
[i-hPRNRemisol] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koanizjm.loh.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:58:10Z] |
[] |
[] |
[] |
[] |
[172.17.23.88] |
[172.17.23.88] |
1 |
Success |
__PSScriptPolicyTest_koanizjm.loh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:58:10 +0000 UTC |
2025-08-17 20:58:10 +0000 UTC |
|
|
|
2025-08-17 20:58:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9da55b55bf7f629825cea208fa7f81ec54f6a19daa972c58ae7dc286f4d68594 |
[68a2a7d21e529195058821a8] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_qmir4he3.i00.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T04:10:52Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_qmir4he3.i00.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 04:10:52 +0000 UTC |
2025-08-18 04:10:52 +0000 UTC |
|
|
|
2025-08-18 04:10:58 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a548df31d03d23622cb379acfbc0695202c0e6f9d3fd292b8231855119eed7eb |
[68a50d976457caa3bd4cff40] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\MedRadA_5_0_2_8.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[Not Signed] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:49:35Z] |
[689ccd0909386b792a96ff44490c0330] |
[ec4d7c17af12efd1448a71da2447d4ae8a11e588] |
[6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35] |
[513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
MedRadA_5_0_2_8.msi |
C:\Users\CA_gs10109\Downloads\ |
|
851968 |
689ccd0909386b792a96ff44490c0330 |
|
|
Not Signed |
2025-08-19 23:49:26 +0000 UTC |
2025-08-19 23:49:28 +0000 UTC |
ec4d7c17af12efd1448a71da2447d4ae8a11e588 |
6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35 |
513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22 |
2025-08-19 23:49:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a596db3f46aad59dc048c9604dd923c50cc42f4839cba96ce5341875ebfdfd96 |
[68a54627d2a51a0036bb0308] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2rcrpoi2.rwf.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T03:50:54Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_2rcrpoi2.rwf.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 03:50:54 +0000 UTC |
2025-08-20 03:50:54 +0000 UTC |
|
|
|
2025-08-20 03:51:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a5ff7457fce680ffacc0bba20ac6a177e78341c7dcae31abefcba7e577e64a7f |
[68a32d9ee5fbd5313b7dadcc] |
[2] |
[shke0124] |
[UH-ADSSP] |
[UTWNNET] |
[C:\DesktopInfo\dtlaunch2.vbs] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\wscript.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T13:41:46Z] |
[e1ace6499530151980189be914a5f89a] |
[3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3] |
[ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba] |
[eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b] |
[172.17.253.172] |
[172.17.253.172] |
1 |
Success |
dtlaunch2.vbs |
C:\DesktopInfo\ |
|
176 |
e1ace6499530151980189be914a5f89a |
|
|
Not Signed |
2019-05-07 16:56:42 +0000 UTC |
2019-04-30 12:25:16 +0000 UTC |
3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3 |
ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba |
eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b |
2025-08-12 21:44:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a6b136aacbe10b92c762f356579330100e2c8b1ae9d6d5657974f9490b3b7f45 |
[68a3146b5f0c41860c8c8545] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\random.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[c2ce0e5ec437c6d8538c27ae345c1042] |
[b7828fe39a90bb14a046eab7bf0a18259468b4d6] |
[e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27] |
[1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
random.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
35246 |
c2ce0e5ec437c6d8538c27ae345c1042 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
b7828fe39a90bb14a046eab7bf0a18259468b4d6 |
e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27 |
1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a70abcb3640f722ba91de8272c43459616c3249eed6a70fe73426299248a0921 |
[68a3b50e0570ac6ecb876346] |
[2] |
[SYSTEM] |
[i-nBMCAtlas] |
[NT AUTHORITY] |
[C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\charsets.jar] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Program Files\Amazon Corretto\jdk1.8.0_352\bin\java.exe] |
[C:\Atlas\PevcoCore\ServiceWrapper.exe] |
[2025-08-18T23:19:40Z] |
[d7251e5cfabd1851fc9f161add6c4614] |
[f8109e7d9708f7915de0513be7afb9b34bf1654b] |
[fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b] |
[4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a] |
[172.17.252.62] |
[172.17.252.62] |
1 |
Success |
charsets.jar |
C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\ |
|
3092101 |
d7251e5cfabd1851fc9f161add6c4614 |
|
|
Not Signed |
2022-10-15 02:36:30 +0000 UTC |
2022-10-15 02:36:30 +0000 UTC |
f8109e7d9708f7915de0513be7afb9b34bf1654b |
fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b |
4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a |
2025-08-18 23:19:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a74e1014a652da7a239592f6d0165e69ba56f2890c3a6192f18481090e01ff37 |
[68a2529a2a645cc96ea797bf] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cob2eltw.0et.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:07:14Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_cob2eltw.0et.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:07:14 +0000 UTC |
2025-08-17 22:07:14 +0000 UTC |
|
|
|
2025-08-17 22:07:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a767d9dc32d4a0e488878f652ef5e97ceb11636426ed07e4243ad94ac1a882c2 |
[68a1f0fecfcf9ec5faefd427] |
[2] |
[SYSTEM] |
[u-v3MWeb] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o0k5mtai.fpt.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T15:10:44Z] |
[] |
[] |
[] |
[] |
[172.25.19.80] |
[172.25.19.80] |
1 |
Success |
__PSScriptPolicyTest_o0k5mtai.fpt.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 15:10:44 +0000 UTC |
2025-08-17 15:10:44 +0000 UTC |
|
|
|
2025-08-17 15:10:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a04620ce2adb9cce34ae2ec9142bcfdc9025b2b3c2e67014c22afecfc3b7bd02 |
[68a3146b5f0c41860c8c84e7, 68a3146b5f0c41860c8c851a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\encodings\__pycache__\aliases.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] |
[6d4c823e9d2c59e8c7a1c22385febbc1] |
[9c505a63924d0934af779792b915ccaf391a6a6b] |
[8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3] |
[7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
aliases.cpython-313.pyc |
C:\Program Files\Python\Lib\encodings\__pycache__\ |
|
12393 |
6d4c823e9d2c59e8c7a1c22385febbc1 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
9c505a63924d0934af779792b915ccaf391a6a6b |
8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3 |
7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a08bb4d95e13cd7f071180ecc9b403249364af378c3a63dc24f56600ca6d54a1 |
[68a471ad04130eaeee8f8d05] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:44:24Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:44:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a10b871ec3447828b319d9b2e28d6149b355385b2769f30727d4a0c8473ddf74 |
[68a1f34c27d6d6088ad4500e] |
[2] |
[SYSTEM] |
[u-v3MWeb] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_m1lxrrkv.j3z.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T15:20:36Z] |
[] |
[] |
[] |
[] |
[172.25.19.80] |
[172.25.19.80] |
1 |
Success |
__PSScriptPolicyTest_m1lxrrkv.j3z.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 15:20:36 +0000 UTC |
2025-08-17 15:20:36 +0000 UTC |
|
|
|
2025-08-17 15:20:44 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 074ce0f504955fa14064a7193cfba318e61c1b6dc27e59b6975601e39df50845 |
[68a19f422de3174858366afa] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gra3lynm.d1r.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:22:04Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_gra3lynm.d1r.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:22:04 +0000 UTC |
2025-08-17 09:22:04 +0000 UTC |
|
|
|
2025-08-17 09:22:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 07968177016a718ed43b2924f24461437c58d6be3aca549059e7097eb38fe4d4 |
[68a4b0fb13fac5171eeef0db] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.WinSocket.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:26Z] |
[e04f8c818fa02aab64810078da470416] |
[be46d5ecd87559de68ef86566904698276e28a1c] |
[01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755] |
[944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.Infrastructure.WinSocket.dll |
C:\Program Files (x86)\Cyrun\ADS - 17978\ |
Cyrun.Infrastructure.Socket |
33280 |
e04f8c818fa02aab64810078da470416 |
Cyrun.Infrastructure.Socket |
1.0.0.0 |
Not Signed |
2019-09-13 08:50:20 +0000 UTC |
2025-05-22 18:17:46 +0000 UTC |
be46d5ecd87559de68ef86566904698276e28a1c |
01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755 |
944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081 |
2025-05-22 18:47:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a8ae15a09049933a89fdb4389e64b361166effd3c50059a27b421c35661ab8ec |
[68a3146b5f0c41860c8c84f7, 68a3146b5f0c41860c8c8538] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\selectors.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[dce6f6cf31043a85ae09dd17ed5d2d5f] |
[811715ac731526bdaee76bf10571075361ecf9d5] |
[544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011] |
[8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
selectors.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
26363 |
dce6f6cf31043a85ae09dd17ed5d2d5f |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
811715ac731526bdaee76bf10571075361ecf9d5 |
544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011 |
8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a8c69cff170a11e09c0db48f6eff36552f0e55bead875b852f53e4014d2ec4ad |
[68a5ea05ebe5b1fd9532e2b9] |
[2] |
[SYSTEM] |
[i-nnvr8] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0q2akhpz.hat.ps1] |
[Servers] |
[Servers Audit] |
[v2303.894] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T15:29:28Z] |
[] |
[] |
[] |
[] |
[172.17.250.215] |
[172.17.250.215] |
1 |
Success |
__PSScriptPolicyTest_0q2akhpz.hat.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 15:29:28 +0000 UTC |
2025-08-20 15:29:28 +0000 UTC |
|
|
|
2025-08-20 15:30:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a95a3864848994037a1db9261c87490070f83ce90f08af579cd568bd979bfe8f |
[68a5239e621d09b2b1ed5e5b] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellHostsDataModel.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[65262622b831d010834ff3548a3dd05a] |
[f1f44b243a97ceff5f11eacd61789dc2e1ad3f21] |
[bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4] |
[517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ShellHostsDataModel.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
13824 |
65262622b831d010834ff3548a3dd05a |
|
1.0.8565.40718 |
Not Signed |
2023-06-15 02:37:18 +0000 UTC |
2023-06-15 02:37:18 +0000 UTC |
f1f44b243a97ceff5f11eacd61789dc2e1ad3f21 |
bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4 |
517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| aa13263cf877fba12972c6ed947fca30c01b3d65106e1346ada8772145045119 |
[68a2676e765f21351af39a4b] |
[2] |
[SYSTEM] |
[HV-I-FAMELASTIC] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjuufxzf.lny.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T23:36:04Z] |
[] |
[] |
[] |
[] |
[172.17.252.183] |
[172.17.252.183] |
1 |
Success |
__PSScriptPolicyTest_hjuufxzf.lny.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 23:36:04 +0000 UTC |
2025-08-17 23:36:04 +0000 UTC |
|
|
|
2025-08-17 23:36:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| aaf84151e67fc2d21578b8d07a8bc592af20149f26cf05cc67de7acee9f4637b |
[68a2349d93dd7dbb6ab7e942] |
[2] |
[SYSTEM] |
[u-nUHCPaging] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_53h31yga.ysi.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:59:20Z] |
[] |
[] |
[] |
[] |
[172.25.22.57] |
[172.25.22.57] |
1 |
Success |
__PSScriptPolicyTest_53h31yga.ysi.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:59:20 +0000 UTC |
2025-08-17 19:59:20 +0000 UTC |
|
|
|
2025-08-17 19:59:25 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ab0001b12e7ad572eb986b3f639d489d860bcdd5c1a84f13f16bc73235b11c44 |
[68a3146b5f0c41860c8c84ea, 68a3146b5f0c41860c8c851e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8_sig.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z] |
[efb0079be3128e1ca929caf3e6968501] |
[3aad7766e3c7603ad9e0b90a344edb5158b6f556] |
[7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664] |
[dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
utf_8_sig.cpython-313.pyc |
C:\Program Files\Python\Lib\encodings\__pycache__\ |
|
6921 |
efb0079be3128e1ca929caf3e6968501 |
|
|
Not Signed |
2024-11-22 16:26:59 +0000 UTC |
2024-11-22 16:26:59 +0000 UTC |
3aad7766e3c7603ad9e0b90a344edb5158b6f556 |
7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664 |
dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ab2b298d409c891edf1513d3484c5c164cb6060a64944ea2e6c0b6dd496f0097 |
[68a246ffe80acba0b194f586] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_fxyje5js.4bs.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:17:47Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_fxyje5js.4bs.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:17:47 +0000 UTC |
2025-08-17 21:17:47 +0000 UTC |
|
|
|
2025-08-17 21:17:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a3a373e7af1e1a849e77ac7afeda3c2fcb310114787f26f0bda956e435b85a2e |
[68a4cf1f4971da3ff4f65d7a] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:23:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:23:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a4454856dcfed999425856c0fd6a1b93a0ffaa9f3847c3c8553a54171ceb81ed |
[68a28941494a241570529b12] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\tmpEXO_4quyqcfh.c4k.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T02:00:24Z] |
[3a71ee92f23de090c1f5c4f973e12c93] |
[0e445921ea26bec3569ea162bf961f3a24c0ed37] |
[961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116] |
[a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_4quyqcfh.c4k.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\ |
|
2290479 |
3a71ee92f23de090c1f5c4f973e12c93 |
|
|
Not Signed |
2025-08-18 02:00:23 +0000 UTC |
2025-08-18 02:00:23 +0000 UTC |
0e445921ea26bec3569ea162bf961f3a24c0ed37 |
961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116 |
a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328 |
2025-08-18 02:00:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0afa64e00fa3297457ecce77cec084a74bb8249564892f7bebfeb90889821242 |
[68a3146b5f0c41860c8c8553] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\subprocess.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[b98aec5604af4147d92232924b474ec2] |
[9f22741de1461c01ea9501244734fbed0b843d10] |
[a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7] |
[fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
subprocess.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
81473 |
b98aec5604af4147d92232924b474ec2 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
9f22741de1461c01ea9501244734fbed0b843d10 |
a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7 |
fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0b6dfe5782a8538388a876949b905a42200e3a0782364dc9ce4bc31d0715f921 |
[68a1c8289d2b908295246da3] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_45ebkynn.fr2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T12:16:33Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_45ebkynn.fr2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 12:16:33 +0000 UTC |
2025-08-17 12:16:33 +0000 UTC |
|
|
|
2025-08-17 12:16:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0b9cfba6305c8496162fda85b7983c16a54a0cf9f440e78036aa9b1bbbd1880a |
[68a2a7be3873668df54ea750] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e0qjqdxl.ujj.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T04:10:32Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_e0qjqdxl.ujj.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 04:10:32 +0000 UTC |
2025-08-18 04:10:32 +0000 UTC |
|
|
|
2025-08-18 04:10:38 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0c13c35bf20b1a1396f441950fc850abdb4789e4c33a49b1e674cca2f73425df |
[68a45d72612cd15680b4837a] |
[2] |
[SYSTEM] |
[TMH-CTX-APP4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_24pv0bd4.rpe.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T11:17:58Z] |
[] |
[] |
[] |
[] |
[172.17.246.19] |
[172.17.246.19] |
1 |
Success |
__PSScriptPolicyTest_24pv0bd4.rpe.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 11:17:58 +0000 UTC |
2025-08-19 11:17:58 +0000 UTC |
|
|
|
2025-08-19 11:18:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0ccd449b623f55b26f3976be2274e35b140cf5272362574dbbe9d88d8b102ea9 |
[68a44b460463afe0b03c0304] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_8c97621ff3534cd19b9e38158d7134a1.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-19T10:00:29Z] |
[] |
[] |
[] |
[] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
expression_host_8c97621ff3534cd19b9e38158d7134a1.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3366.16 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 10:00:38 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0ce6997fa6eafbce91ac022bb3118f6a8653a53c0863a4e9c6b6323576adb12b |
[68a4d176f9567d58ffcb80f2] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:33:06Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:33:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0cef77375419ad8202ff4e7155a1455435de15f2d60b15ede6bc211911fde757 |
[68a5239e621d09b2b1ed5e68] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManager.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:40Z] |
[ca0b0d10eb53b26c35284118371cec1c] |
[ba2ffd3912e3b01d09e74f5d0b929108f5493d5a] |
[9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df] |
[3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
SystemManager.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
SystemManagerGui |
67584 |
ca0b0d10eb53b26c35284118371cec1c |
SystemManagerGui |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:30 +0000 UTC |
2023-06-15 02:38:30 +0000 UTC |
ba2ffd3912e3b01d09e74f5d0b929108f5493d5a |
9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df |
3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 06d6384eaa2d1376de884f3855044df87f2e12c1b92086a6f8723dd79a85457b |
[68a4b0fb13fac5171eeef0d7] |
[2] |
[CA_Jnt_CyrunSrv1] |
[vm-cyrun] |
[WVUHS] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.dll] |
[Servers] |
[Servers Audit] |
[v2280.872] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] |
[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] |
[2025-08-19T17:08:08Z] |
[7d99492eba75b4117d502f502784bec7] |
[3ec8beef2e968bb0740afb894a42a4cb412370a1] |
[4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830] |
[43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b] |
[172.17.252.160] |
[172.17.252.160] |
1 |
Success |
Cyrun.Infrastructure.dll |
C:\Program Files (x86)\Cyrun\ADS - 17978\ |
Cyrun.Infrastructure |
125952 |
7d99492eba75b4117d502f502784bec7 |
Pegasus |
7.0.4.4644 |
Not Signed |
2019-09-13 08:50:18 +0000 UTC |
2025-05-22 18:17:46 +0000 UTC |
3ec8beef2e968bb0740afb894a42a4cb412370a1 |
4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830 |
43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b |
2025-05-22 18:47:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 06df260c7f1ba98730dee7d60aff5ecc12aa9273592a62980464f2493eb4db25 |
[68a523949cec397f02de9f49] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BSSIDControl.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:26Z] |
[de8df8b7c6fc4502d6f9335776b32154] |
[850b37d6e0057b3ff641e78b7dd7f64fe1d7f109] |
[8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f] |
[9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
BSSIDControl.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
BSSIDControl |
10240 |
de8df8b7c6fc4502d6f9335776b32154 |
BSSIDControl |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:22 +0000 UTC |
2023-06-15 02:36:22 +0000 UTC |
850b37d6e0057b3ff641e78b7dd7f64fe1d7f109 |
8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f |
9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ab9b7bb85b4a86b0959ea8ab79a27d2943d17f81f93306f5628edf2f0e1d69ee |
[68a4855388937a93ff144374] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Data.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:08:10Z] |
[f6f2e748b8e7aebde05c149eccef41f3] |
[279bb7a5349ffe29333bc142aac24e8e2cfa883c] |
[c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de] |
[2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Authentication.Data.dll |
C:\Stryker\iBed Server Application\Stryker.Authentication\ |
Stryker.iBedServer.Authentication.Data |
11264 |
f6f2e748b8e7aebde05c149eccef41f3 |
Stryker.iBedServer.Authentication.Data |
1.0.0 |
Not Signed |
2023-03-16 10:22:16 +0000 UTC |
2023-03-16 10:22:16 +0000 UTC |
279bb7a5349ffe29333bc142aac24e8e2cfa883c |
c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de |
2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8 |
2025-08-19 14:08:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| abfc4eadbf5b3acb9932b4f2d763d6aa06f05c2031a181854aa56996337ce231 |
[68a4ce1bb0bf18198cad4ef7] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cweckucy.31w.ps1] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:18:42Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_cweckucy.31w.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 19:18:42 +0000 UTC |
2025-08-19 19:18:42 +0000 UTC |
|
|
|
2025-08-19 19:18:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ac5c7e37104a139a3ea877b75658eff5f399de2333e5ba8c3e5388f8890389dc |
[68a523949cec397f02de9f4f] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Control.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:27Z] |
[3f5edae09a2d2bbfda7864aa86623e86] |
[a31163d319bb84f551dcd9ee88b4bc9fb6323152] |
[7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9] |
[87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Control.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
20480 |
3f5edae09a2d2bbfda7864aa86623e86 |
|
1.0.8565.40744 |
Not Signed |
2023-06-15 02:38:10 +0000 UTC |
2023-06-15 02:38:10 +0000 UTC |
a31163d319bb84f551dcd9ee88b4bc9fb6323152 |
7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9 |
87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| acbc4f0a5eaf7c7d93ac6e6b7215bfc3335342b6e2dd8dca6f53dcb7ee79b033 |
[68a2a5fb28c6be6b08f580b6] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5tf0ydu5.0zc.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T04:03:01Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_5tf0ydu5.0zc.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 04:03:01 +0000 UTC |
2025-08-18 04:03:01 +0000 UTC |
|
|
|
2025-08-18 04:03:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ad17815283c3efec2632516bfb653476c33644002df5f1aa22804c8b165f6170 |
[68a311cdc2d0d6e3eb77f21e] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:39:07Z] |
[51edb535cb2fcd632ec8c09c14fe100f] |
[ed4596c1f4043fb241a493063969f44e970c3e04] |
[994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd] |
[a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Microsoft.PowerShellISE_profile.ps1 |
C:\Users\georgemag\Documents\WindowsPowerShell\ |
|
152 |
51edb535cb2fcd632ec8c09c14fe100f |
|
|
Not Signed |
2025-05-29 17:38:09 +0000 UTC |
2023-08-31 18:12:15 +0000 UTC |
ed4596c1f4043fb241a493063969f44e970c3e04 |
994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd |
a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ada1fdc640def878fdcc18021bedea9d70ed8c536f9747198187bbb5d17356cf |
[68a238fd2d0808cf577455c5] |
[2] |
[SYSTEM] |
[u-hvhprod12] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_od0m00va.ovq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:17:57Z] |
[] |
[] |
[] |
[] |
[172.25.19.217] |
[172.25.19.217] |
1 |
Success |
__PSScriptPolicyTest_od0m00va.ovq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:17:57 +0000 UTC |
2025-08-17 20:17:57 +0000 UTC |
|
|
|
2025-08-17 20:18:05 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| adaefc2aa3397945c97b623d64120ad2b6519d4851e36bff57f9f0883c771108 |
[68a164117581c1d365b56ef1, 68a2b59a1058adce8154cb02] |
[2] |
[sunrisebackup] |
[CI1BEFS3] |
[WHI] |
[D:\adminscripts\SCMNightlyAdmin.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:00Z, 2025-08-18T05:00:00Z] |
[3347796315705d161a99178531496358] |
[edba27f15fb9731ee5129e5325e18ebbab93f9a2] |
[2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687] |
[0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2] |
[172.18.112.86] |
[172.18.112.86] |
1 |
Success |
SCMNightlyAdmin.bat |
D:\adminscripts\ |
|
70 |
3347796315705d161a99178531496358 |
|
|
Not Signed |
2019-09-17 15:10:50 +0000 UTC |
2013-08-21 18:34:04 +0000 UTC |
edba27f15fb9731ee5129e5325e18ebbab93f9a2 |
2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687 |
0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2 |
2025-08-09 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ae73137687a27f2a7dac88f244bb0a8bf7932a7d05c197173f1621766e66d7e2 |
[68a253ef9fa0433bd6158684] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eygtkwak.uks.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:12:56Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_eygtkwak.uks.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:12:56 +0000 UTC |
2025-08-17 22:12:56 +0000 UTC |
|
|
|
2025-08-17 22:13:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a777578b5261143b213a8b866c266b434757c0d70c0bff30823ba2aa77cb6f99 |
[68a1dcde696c67888926ebf4] |
[2] |
[SYSTEM] |
[WH1EMGSQL1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_g5umrco1.qad.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:44:48Z] |
[] |
[] |
[] |
[] |
[172.18.99.115] |
[172.18.99.115] |
1 |
Success |
__PSScriptPolicyTest_g5umrco1.qad.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:44:48 +0000 UTC |
2025-08-17 13:44:48 +0000 UTC |
|
|
|
2025-08-17 13:45:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a7cccc87ac2b6a10d20c9bc854dda16ada4efba273b52f1b2aea2e1590febe83 |
[68a311cdc2d0d6e3eb77f213] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AddRemoveADGroupMembers.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[6125933ae4a52b308e5db3f580da5971] |
[9bd2f70e769baa4eeadac833831062423a4ace2b] |
[c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b] |
[3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
AddRemoveADGroupMembers.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
433 |
6125933ae4a52b308e5db3f580da5971 |
|
|
Not Signed |
2021-11-18 18:17:40 +0000 UTC |
2021-02-15 19:13:49 +0000 UTC |
9bd2f70e769baa4eeadac833831062423a4ace2b |
c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b |
3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b3aee295edf894a88964eb7fa381561a95f892e2a2a3c29630c97c882aab46d9 |
[68a31bbacbbb0c7bfb580ca8] |
[2] |
[SYSTEM] |
[i-nWHLAPP01] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2kil5soy.rh3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:25:27Z] |
[] |
[] |
[] |
[] |
[172.17.146.33] |
[172.17.146.33] |
1 |
Success |
__PSScriptPolicyTest_2kil5soy.rh3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:25:27 +0000 UTC |
2025-08-18 12:25:27 +0000 UTC |
|
|
|
2025-08-18 12:25:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b3f3dce7a596ba8e3a87f5ddeaaad498b74d1b3393eecfc602a33d4968ffaf2b |
[68a2219559db607aeb81cbd5] |
[2] |
[SYSTEM] |
[uvOSCCN2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a2eipcbx.muw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T18:38:04Z] |
[] |
[] |
[] |
[] |
[172.25.18.157] |
[172.25.18.157] |
1 |
Success |
__PSScriptPolicyTest_a2eipcbx.muw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 18:38:04 +0000 UTC |
2025-08-17 18:38:04 +0000 UTC |
|
|
|
2025-08-17 18:38:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ae938cf2fc97de3ecebb4366788b40c4b0278d5d8590cfec49822ceccaba6cc1 |
[68a32505df020a242f955315] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q3yphmy4.esi.ps1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T13:05:08Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_q3yphmy4.esi.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 13:05:08 +0000 UTC |
2025-08-18 13:05:08 +0000 UTC |
|
|
|
2025-08-18 13:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| afcee321d7c7d802d9cd2489bd88d1aa30043b3576078e4ecbfb9c8fb3b7df7b |
[68a165183f1f36f01a2f3ff2, 68a2b69c8b983fbe0c82338d, 68a40846a972cb7f3cce6ebb, 68a5578d6ea23be9f4b23b73] |
[2] |
[SYSTEM] |
[u-vroggerb] |
[NT AUTHORITY] |
[C:\icm\pcce\rb\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z] |
[9b70ea11df34de22f6a0b16fddf15abc] |
[296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358] |
[6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052] |
[ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292] |
[172.25.196.35] |
[172.25.196.35] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\rb\bin\ |
|
406 |
9b70ea11df34de22f6a0b16fddf15abc |
|
|
Not Signed |
2021-10-07 20:04:22 +0000 UTC |
2021-10-07 20:04:22 +0000 UTC |
296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358 |
6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052 |
ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| afd354cdedd2b9416488113376fb0d902eed137a474db3f4950dfe724f4af992 |
[68a3146b5f0c41860c8c84f1, 68a3146b5f0c41860c8c852e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\collections\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[d9f076f7a677fa5a6ef8c75ca0ba3c77] |
[92b5e1df018c550f117247f779ae19db21eaae9f] |
[4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a] |
[a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\collections\__pycache__\ |
|
73105 |
d9f076f7a677fa5a6ef8c75ca0ba3c77 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
92b5e1df018c550f117247f779ae19db21eaae9f |
4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a |
a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b037b79be171f4aa0667e324cadfec44ffe7822980c741fe4c0e08263c13e651 |
[68a5239e621d09b2b1ed5e50] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:35Z] |
[3f67c30ff4a260e1eb472273f8adddae] |
[6cc927b8950e31a2117aabc6226b40ba6e255fe0] |
[1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98] |
[32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PlaybackData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Data |
1496576 |
3f67c30ff4a260e1eb472273f8adddae |
Data |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:24 +0000 UTC |
2023-06-15 02:37:24 +0000 UTC |
6cc927b8950e31a2117aabc6226b40ba6e255fe0 |
1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98 |
32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b05164c297f162623bc1e95e24652366aefa9c1981e348865e032cd0560206f2 |
[68a198085cb01f9c46d51708] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kvkgjkg.3ev.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:51:14Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_1kvkgjkg.3ev.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:51:14 +0000 UTC |
2025-08-17 08:51:14 +0000 UTC |
|
|
|
2025-08-17 08:51:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b0c8cbaecbdb0386376e51b838bdc5126f68432b9ae7ee2a40ccaabf7aa347b7 |
[68a533e1954adb953e029f0c] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o5ngoajq.xjy.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T02:33:00Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_o5ngoajq.xjy.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 02:33:00 +0000 UTC |
2025-08-20 02:33:00 +0000 UTC |
|
|
|
2025-08-20 02:33:05 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b13fd81c7196ec3a08414d632e41768dd453368707898569a112522c52d021a8 |
[68a191be4a6689329df75d3c] |
[2] |
[SYSTEM] |
[u-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0cdtq1pr.td3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:24:26Z] |
[] |
[] |
[] |
[] |
[172.25.10.9] |
[172.25.10.9] |
1 |
Success |
__PSScriptPolicyTest_0cdtq1pr.td3.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:24:26 +0000 UTC |
2025-08-17 08:24:26 +0000 UTC |
|
|
|
2025-08-17 08:24:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b1488a51345ec65399924b338a116841ec55647b58545f134b763fc74e6cdd6b |
[68a5239e621d09b2b1ed5e51] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackGUI.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:36Z] |
[91881048e0480bb6f1d2a01a584dbc0e] |
[197bbba69f29bd0ad3259f80e9fbaa46572c04ec] |
[56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a] |
[4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PlaybackGUI.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
GUI |
112128 |
91881048e0480bb6f1d2a01a584dbc0e |
GUI |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:58 +0000 UTC |
2023-06-15 02:37:58 +0000 UTC |
197bbba69f29bd0ad3259f80e9fbaa46572c04ec |
56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a |
4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b78984455debffa0028d3e0622604eed012e7af47b86694db7145688d5665881 |
[68a3245120cdf2a94b146f91] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\tmp_xyrtah4t.fox.psm1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T13:02:08Z] |
[5a50d1d12cefd1d7851797d436fefba4] |
[bf6cbc8bade556ceffa2a7e056ad531a37ae415f] |
[0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60] |
[b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmp_xyrtah4t.fox.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\ |
|
4669542 |
5a50d1d12cefd1d7851797d436fefba4 |
|
|
Not Signed |
2025-08-18 13:02:08 +0000 UTC |
2025-08-18 13:02:08 +0000 UTC |
bf6cbc8bade556ceffa2a7e056ad531a37ae415f |
0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60 |
b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8 |
2025-08-18 13:02:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b7b074a8be506995e4f7f47f986e3fa7e7e5de6b93db80ae4b178c336f308368 |
[68a4c47e2db3c760ec3d2a2b] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_7df3f40078b24ec2b13b78976237aec3.dll] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T18:37:40Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_7df3f40078b24ec2b13b78976237aec3.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 18:37:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b180bc0178b09ceeda8bfbc9d31b027b81c5d22112d3565439e93d55fba48e26 |
[68a34b98a6132bf659cce5b6, 68a34df0b71eea1289980a1b] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.BadgeDesigner.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z] |
[494ef760b62995f95b39dbab2b3dede0] |
[daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4] |
[b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81] |
[973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.BadgeDesigner.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Badge Designer |
1878528 |
494ef760b62995f95b39dbab2b3dede0 |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:02:58 +0000 UTC |
2023-04-26 15:02:58 +0000 UTC |
daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4 |
b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81 |
973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a |
2025-05-13 05:13:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b20b976d3c543ddaf040e446fb5d2b222c48d92f4138ac8c84ff50c098a595a1 |
[68a311cdc2d0d6e3eb77f215] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result-2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[5df2e31963b90c169c0b60f6fcbe78ca] |
[3d68e24539d2676b2e1baf19621f037391dc5d8b] |
[5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e] |
[c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
GP-Result-2.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
281 |
5df2e31963b90c169c0b60f6fcbe78ca |
|
|
Not Signed |
2023-02-22 21:35:08 +0000 UTC |
2023-02-22 21:35:08 +0000 UTC |
3d68e24539d2676b2e1baf19621f037391dc5d8b |
5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e |
c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b29891eb56e0294032177d3e010dc819c5b71ef58a86a6b4d59901c6903f24bd |
[68a5239e621d09b2b1ed5e4d] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServicesFacade.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:34Z] |
[2b18faf53fc63bb5296888bd87664da1] |
[4f0c9afc061841d8539cc5a3e3320483d837b9da] |
[be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb] |
[2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PeCommServicesFacade.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
PeCommServicesFacade |
90624 |
2b18faf53fc63bb5296888bd87664da1 |
PeCommServicesFacade |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:18 +0000 UTC |
2023-06-15 02:37:18 +0000 UTC |
4f0c9afc061841d8539cc5a3e3320483d837b9da |
be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb |
2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b2b829e8a8e70f50b6a8cf06fce67da3a1ca6a94edaf3695549d26121c3b7714 |
[68a4767cdfcdccd185a6a0e1] |
[2] |
[SYSTEM] |
[i-nctx-pvs2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d04ale1f.v4l.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T13:04:58Z] |
[] |
[] |
[] |
[] |
[172.17.246.5] |
[172.17.246.5] |
1 |
Success |
__PSScriptPolicyTest_d04ale1f.v4l.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 13:04:58 +0000 UTC |
2025-08-19 13:04:58 +0000 UTC |
|
|
|
2025-08-19 13:05:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b2f925f8d062ab2fc1673c086fb48594e430fd2c0ec7eb934f81d96a34d0ea16 |
[68a164af314711b37247c0a3, 68a2b633bc43c5800255e65f, 68a408552c9c833f6d66b3f9, 68a559867a66111383e972e2] |
[2] |
[SYSTEM] |
[i-vpg1a] |
[NT AUTHORITY] |
[C:\icm\pcce\PG1A\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[ef14e4a8cc642332fc30ac0bcb94fe34] |
[6caa0f9496776587777d38905a7de70c6487a3a3] |
[04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74] |
[22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000] |
[172.17.196.43] |
[172.17.196.43] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\PG1A\bin\ |
|
410 |
ef14e4a8cc642332fc30ac0bcb94fe34 |
|
|
Not Signed |
2021-10-07 20:04:31 +0000 UTC |
2022-12-21 07:59:47 +0000 UTC |
6caa0f9496776587777d38905a7de70c6487a3a3 |
04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74 |
22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b37be6e880d1111feb27c4482864a487c1ce7bf7ff74f481aef0aa5cbd0cb936 |
[68a5c233a5c8de03b7ff4fb5] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_fec2b8080fd34625874eec49b533f1b5.dll] |
[Servers] |
[Servers Audit] |
[v2287.879] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:40:13Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_fec2b8080fd34625874eec49b533f1b5.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 12:40:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ba0a35ba189d00bdb6b111752821f3669b627aaca52bb4b10f5fcf64160f529b |
[68a223c52dfc87abfe6c481e] |
[2] |
[SYSTEM] |
[DP-Fairmont] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xhjpbhxc.j3s.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T18:47:29Z] |
[] |
[] |
[] |
[] |
[172.16.121.132] |
[172.16.121.132] |
1 |
Success |
__PSScriptPolicyTest_xhjpbhxc.j3s.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 18:47:29 +0000 UTC |
2025-08-17 18:47:29 +0000 UTC |
|
|
|
2025-08-17 18:47:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ba6629e795cffb8817cc3c0107f7236a6c5de18c79028ebf70764952b39da475 |
[68a523949cec397f02de9f50] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CoverageAndAccuracyAnalyzer.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:27Z] |
[ae5d8bbe8d977a4803d26ca7e9f13e54] |
[8657b548e0b81e31a64d88c4fb0a7ddc694c7823] |
[868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9] |
[c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
CoverageAndAccuracyAnalyzer.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
458752 |
ae5d8bbe8d977a4803d26ca7e9f13e54 |
|
1.0.8565.40750 |
Not Signed |
2023-06-15 02:38:24 +0000 UTC |
2023-06-15 02:38:24 +0000 UTC |
8657b548e0b81e31a64d88c4fb0a7ddc694c7823 |
868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9 |
c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ba72fc4388172874b1939f7066f2216e2a3bc68fd4270ce70289271537f3b218 |
[68a34b98a6132bf659cce5aa, 68a34df0b71eea1289980a0f] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Controls.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:10Z, 2025-08-18T15:58:03Z] |
[b31ce0cf803ae8da1785b059a6bfbb59] |
[1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb] |
[19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b] |
[f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.Controls.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
Controls |
823296 |
b31ce0cf803ae8da1785b059a6bfbb59 |
Access It! |
10.1.0.7 |
Not Signed |
2023-04-26 15:02:44 +0000 UTC |
2023-04-26 15:02:44 +0000 UTC |
1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb |
19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b |
f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8 |
2025-05-13 12:24:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b4078ab651d17c4b369f8715ad39efccc3486c43f9251216892df4b2c5803d82 |
[68a1a4ec481e55b8d125b626] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cvo0wbij.qu1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:46:14Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_cvo0wbij.qu1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:46:14 +0000 UTC |
2025-08-17 09:46:14 +0000 UTC |
|
|
|
2025-08-17 09:46:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b511a6022af485b824a56917829fb0ef0ca73c3f9e1d33f129726fc72d2c3336 |
[68a523949cec397f02de9f44] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AnalyzerFacade.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:25Z] |
[8b60c2b5e55285098541e339810946da] |
[6d4c57ebde036e7090fcdd723f58ad5eee852c70] |
[7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1] |
[6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
AnalyzerFacade.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
AnalyzerFacade |
12800 |
8b60c2b5e55285098541e339810946da |
AnalyzerFacade |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:42 +0000 UTC |
2023-06-15 02:37:42 +0000 UTC |
6d4c57ebde036e7090fcdd723f58ad5eee852c70 |
7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1 |
6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b561139fa338c5b200834e229f07a555a9205fe738e17c4049ff79395c89908a |
[68a55e004fbc48ef3ae2d514] |
[2] |
[SYSTEM] |
[i-nctx-pvs1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cann4xwj.005.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:32:41Z] |
[] |
[] |
[] |
[] |
[172.17.146.5] |
[172.17.146.5] |
1 |
Success |
__PSScriptPolicyTest_cann4xwj.005.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:32:41 +0000 UTC |
2025-08-20 05:32:41 +0000 UTC |
|
|
|
2025-08-20 05:32:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b59250b9adde69abc6f23216abeb16e32637bb047a8192277bc1a8c55586c512 |
[68a3146b5f0c41860c8c8533] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\signal.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z] |
[98e32654cc4beecc5b9986354e2cb5dd] |
[8a835d62b26651f30621da221a647e38e6c7a3df] |
[c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff] |
[59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
signal.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
4546 |
98e32654cc4beecc5b9986354e2cb5dd |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
8a835d62b26651f30621da221a647e38e6c7a3df |
c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff |
59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b59bec3484b1e3784e15b424f7e821225085d138b019e05882bda94241dc00e3 |
[68a311cdc2d0d6e3eb77f210] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\STJ-RoboCopy Backups.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[c31cd4a84106cd950c509053746c600a] |
[6947d2e1b5f8f8b4edc283006497752985874c4b] |
[8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398] |
[15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
STJ-RoboCopy Backups.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
2852 |
c31cd4a84106cd950c509053746c600a |
|
|
Not Signed |
2021-11-18 18:17:22 +0000 UTC |
2025-04-16 19:23:14 +0000 UTC |
6947d2e1b5f8f8b4edc283006497752985874c4b |
8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398 |
15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b5d7aeb1b57572ef3c25893b3dbdfbddff207e741e87b3af78941e08b1b66f3c |
[68a31ae889b2c7794e79451a] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_hwz0hraw.sk0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:21:56Z] |
[] |
[] |
[] |
[] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
__PSScriptPolicyTest_hwz0hraw.sk0.ps1 |
C:\Users\be10045\AppData\Local\Temp\2\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:21:56 +0000 UTC |
2025-08-18 12:21:56 +0000 UTC |
|
|
|
2025-08-18 12:22:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b67e96557db684ea3d20a57301813992a9bb287858163364903b7812408d80dc |
[68a2a2b145e54eb8011b598c, 68a3f3b82b0ad9191f472694, 68a545ad1588ee149e3e4b07] |
[2] |
[jskwv] |
[I-nMoveItXfer] |
[WVUHS] |
[E:\MOVEitTransfer\Scheduler\Transfer_Backup.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T03:39:01Z, 2025-08-19T03:39:01Z, 2025-08-20T03:39:01Z] |
[74742b6a20af7f6a8d04c5730e252d6f] |
[5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9] |
[705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc] |
[3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9] |
[172.17.253.253] |
[172.17.253.253] |
1 |
Success |
Transfer_Backup.bat |
E:\MOVEitTransfer\Scheduler\ |
|
179 |
74742b6a20af7f6a8d04c5730e252d6f |
|
|
Not Signed |
2024-02-21 18:38:03 +0000 UTC |
2024-02-27 13:33:08 +0000 UTC |
5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9 |
705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc |
3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9 |
2025-08-09 03:39:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b77c030cc7905994ec426f0da89c90fe737ec024b6c5993906e40ecb5da71451 |
[68a37f2f3086ee3e1235fb78] |
[2] |
[SYSTEM] |
[I-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_biqeuy3o.ye3.ps1] |
[Servers] |
[Servers Audit] |
[v2267.864] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T19:29:49Z] |
[] |
[] |
[] |
[] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
__PSScriptPolicyTest_biqeuy3o.ye3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 19:29:49 +0000 UTC |
2025-08-18 19:29:49 +0000 UTC |
|
|
|
2025-08-18 19:29:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b7825fdc3e3579c3e55c8ada3988398c80f2bf0210559ffd4a4a2e877281142e |
[68a254cb23f365394e70285a] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fed2ttov.ux0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:16:32Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_fed2ttov.ux0.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:16:32 +0000 UTC |
2025-08-17 22:16:32 +0000 UTC |
|
|
|
2025-08-17 22:16:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bd79e98f45782e89ee51e26e013872c1faf37f65e8587e8548d46ad3f983620c |
[68a241507a42095fec9759e0] |
[2] |
[SYSTEM] |
[u-hintranet] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aolq2wnp.tpe.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:53:27Z] |
[] |
[] |
[] |
[] |
[172.25.18.7] |
[172.25.18.7] |
1 |
Success |
__PSScriptPolicyTest_aolq2wnp.tpe.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:53:27 +0000 UTC |
2025-08-17 20:53:27 +0000 UTC |
|
|
|
2025-08-17 20:53:36 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b7d519ae6a735e97fcb0cd79bdab293c9bcfa2506bb6bd7f8fa5d472db60459c |
[68a523949cec397f02de9f4e] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CommonPropertiesViewAccessor.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:27Z] |
[d5b36a1cfb5d705b9b73158b06477362] |
[d9fd05e56d2e29cc1562b515b18468fc3f4a5b78] |
[d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f] |
[3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
CommonPropertiesViewAccessor.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
CommonPropertiesViews |
10240 |
d5b36a1cfb5d705b9b73158b06477362 |
CommonPropertiesViews |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:52 +0000 UTC |
2023-06-15 02:37:52 +0000 UTC |
d9fd05e56d2e29cc1562b515b18468fc3f4a5b78 |
d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f |
3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b7f2e8f1f6db47a8161afee3f7622b254ca82a8359fd0abb491c6c6dfbf4d64f |
[68a311cdc2d0d6e3eb77f206] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\Get-O365Recip-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[499c7364c1c683bfe66b60484bcd9d37] |
[ac1ccb570f21610993e4deae5958e14f68b2e40c] |
[3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd] |
[01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Get-O365Recip-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
47512 |
499c7364c1c683bfe66b60484bcd9d37 |
|
|
Not Signed |
2025-02-28 16:56:32 +0000 UTC |
2025-02-28 16:56:32 +0000 UTC |
ac1ccb570f21610993e4deae5958e14f68b2e40c |
3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd |
01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b7fe4622933d7c1a7c53299db1c824d52a784e0af74283aae7ec1b9169dd8a20 |
[68a164af314711b37247c0a4, 68a2b633bc43c5800255e660, 68a408552c9c833f6d66b3f8, 68a559867a66111383e972e4] |
[2] |
[SYSTEM] |
[i-vpg1a] |
[NT AUTHORITY] |
[C:\icm\pcce\PG3A\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[527c15cbb2fe42bc3c85f5a6c8722700] |
[ab323a93daa8ccdbc6c23f5fbf5779189899cfc3] |
[030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c] |
[890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d] |
[172.17.196.43] |
[172.17.196.43] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\PG3A\bin\ |
|
410 |
527c15cbb2fe42bc3c85f5a6c8722700 |
|
|
Not Signed |
2021-10-07 20:04:45 +0000 UTC |
2021-10-07 20:04:45 +0000 UTC |
ab323a93daa8ccdbc6c23f5fbf5779189899cfc3 |
030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c |
890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b84fc2be29f8ec8d88aeeab2dcb336c1f5f8e6ca8377fc5e362c14b5d7107cfa |
[68a5be0ff6fc3715f4449f44] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\tmp_5ltoq3rq.ifx.psm1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:22:33Z] |
[965ce93ed86a419fab19dac9c846905f] |
[db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef] |
[3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e] |
[6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmp_5ltoq3rq.ifx.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\ |
|
4669944 |
965ce93ed86a419fab19dac9c846905f |
|
|
Not Signed |
2025-08-20 12:22:33 +0000 UTC |
2025-08-20 12:22:33 +0000 UTC |
db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef |
3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e |
6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234 |
2025-08-20 12:22:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b85b23da452663f58b6f9b7ab45593958feea65172bf427c8b37face06a87982 |
[68a3146b5f0c41860c8c850b, 68a3146b5f0c41860c8c855e] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\_parseaddr.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[7b77eb5e6cbc5ad91a9839f110240b19] |
[c026a9d1bf349081e31bc6d062263cd6283cadee] |
[d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5] |
[4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_parseaddr.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
23570 |
7b77eb5e6cbc5ad91a9839f110240b19 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
c026a9d1bf349081e31bc6d062263cd6283cadee |
d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5 |
4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b86ff7561af0f3e859b9e84637797298246dc1ce387949f2edbd3d5b1e77280a |
[68a191aae18cc7bf65302e71] |
[2] |
[SYSTEM] |
[u-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_idh1m53d.0uw.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:24:07Z] |
[] |
[] |
[] |
[] |
[172.25.10.9] |
[172.25.10.9] |
1 |
Success |
__PSScriptPolicyTest_idh1m53d.0uw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:24:07 +0000 UTC |
2025-08-17 08:24:07 +0000 UTC |
|
|
|
2025-08-17 08:24:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b890b88192a223a900d9aad500373d9063f118fc8766d8b4735a325fb6801018 |
[68a51d7e1d680695d3f9edbd] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_shrbidj0.cko.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T00:57:23Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_shrbidj0.cko.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 00:57:23 +0000 UTC |
2025-08-20 00:57:23 +0000 UTC |
|
|
|
2025-08-20 00:57:34 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b89a7bc12b53e050d63c480c02dca3465ec46030fdc218b1e39fa9e3ac4de1b0 |
[68a5cc349d52e7a8b7af63d8] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:53Z] |
[818225421d2ff632a02c29cb34911515] |
[fb0da057d2c2e63d16b2edabf800317ff1330839] |
[747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650] |
[55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1 |
C:\_work_devops_mdi\_temp\ |
|
1822 |
818225421d2ff632a02c29cb34911515 |
|
|
Not Signed |
2025-08-20 13:22:52 +0000 UTC |
2025-08-20 13:22:52 +0000 UTC |
fb0da057d2c2e63d16b2edabf800317ff1330839 |
747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650 |
55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169 |
2025-08-20 13:23:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b8b19794e923a87fdd28cbda97d035b042db36fcee37dd4484df192b845048d9 |
[68a34d6610b57c5bffc57dae] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:29Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b96d73284c337848272fa37ac7ce8d932f38fac1e8ce7c4cad00d0269c3c6d95 |
[68a181c21bfbeda4694fdffa, 68a2d3509d0518d9d631f7e6, 68a424e9ee9f96031977be4b, 68a5773a7caf7da878b3cf54] |
[2] |
[hppc] |
[ivOSCCN1] |
[IVOSCCN1] |
[C:\bin\OsccBackup.cmd] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:10:25Z, 2025-08-18T07:10:25Z, 2025-08-19T07:10:26Z, 2025-08-20T07:10:25Z] |
[fcf50a056b3ffa96b640a38d655dc1f6] |
[56bac5386ef9a04cd2807ff235f395be9bd0cfe6] |
[d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113] |
[0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530] |
[172.17.21.34] |
[172.17.21.34] |
1 |
Success |
OsccBackup.cmd |
C:\bin\ |
|
2975 |
fcf50a056b3ffa96b640a38d655dc1f6 |
|
|
Not Signed |
2022-05-08 10:19:37 +0000 UTC |
2022-03-01 18:22:37 +0000 UTC |
56bac5386ef9a04cd2807ff235f395be9bd0cfe6 |
d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113 |
0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530 |
2025-08-09 07:10:28 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b99374cf4c828d4f0a0cc7479cd72181f5e1e8cb7d06e4542fe9f70a092364a7 |
[68a50d29c9694e1e7f8f163d] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\MasimoA_5_0_3_6.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[Not Signed] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:47:50Z] |
[b05d0a00db3ebcaaf5e56cadb578324c] |
[ba246078ee4beeee2e07d8585ddba002f741bcc6] |
[2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac] |
[71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
MasimoA_5_0_3_6.msi |
C:\Users\CA_gs10109\Downloads\ |
|
836608 |
b05d0a00db3ebcaaf5e56cadb578324c |
|
|
Not Signed |
2025-08-19 23:47:36 +0000 UTC |
2025-08-19 23:47:46 +0000 UTC |
ba246078ee4beeee2e07d8585ddba002f741bcc6 |
2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac |
71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405 |
2025-08-19 23:47:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b9a96cee003b20d0bb55c2e7f974aa492bd30d4b320ff76462b277aa41ff1298 |
[68a4698d5445b9aa205794ec] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:09:47Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:09:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c20c9862e9f229c783934344ec3cf0effa49a4fa48f8aa9ec11af817ce5f9624 |
[68a17f77d37f800f0e604b32] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2orxsm0.eiy.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:06:19Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_s2orxsm0.eiy.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:06:19 +0000 UTC |
2025-08-17 07:06:19 +0000 UTC |
|
|
|
2025-08-17 07:06:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bbd86edc2c3565783aa1938aa5f3bd807cc89a133ace4980c6023c6002109e50 |
[68a1b24bfa129e536415c635] |
[2] |
[SYSTEM] |
[u-nLanSweep1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gnb4wcd.hsz.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:43:10Z] |
[] |
[] |
[] |
[] |
[172.25.17.127] |
[172.25.17.127] |
1 |
Success |
__PSScriptPolicyTest_2gnb4wcd.hsz.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:43:10 +0000 UTC |
2025-08-17 10:43:10 +0000 UTC |
|
|
|
2025-08-17 10:43:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bc9ae90107a5c1f70c604ec5dff275f870d4e75c684dc03d05ef9fa4406d0c70 |
[68a5621beb84499e47622cf6] |
[2] |
[SYSTEM] |
[I-EXTHSW-NP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qqnyxqog.4g5.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:50:09Z] |
[] |
[] |
[] |
[] |
[172.17.46.130] |
[172.17.46.130] |
1 |
Success |
__PSScriptPolicyTest_qqnyxqog.4g5.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:50:09 +0000 UTC |
2025-08-20 05:50:09 +0000 UTC |
|
|
|
2025-08-20 05:50:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bc9cf02ea7753bec4aa072388d1712951cb6fbdf6189a89af968a0049dca7e5a |
[68a4a6605961c54c81f645c8] |
[2] |
[be10045eu] |
[i-nsdprodmon1] |
[WVUHS] |
[C:\Users\be10045eu\AppData\Local\Temp\2\__PSScriptPolicyTest_lxe33krl.g3q.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:29:15Z] |
[] |
[] |
[] |
[] |
[172.17.252.208] |
[172.17.252.208] |
1 |
Success |
__PSScriptPolicyTest_lxe33krl.g3q.ps1 |
C:\Users\be10045eu\AppData\Local\Temp\2\ |
|
81 |
|
|
|
Not Signed |
2025-08-19 16:29:15 +0000 UTC |
2025-08-19 16:29:15 +0000 UTC |
|
|
|
2025-08-19 16:29:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bcb7eca729429e6e4bde18597726ed72e9254a2170afc225e8153e8adc0c4647 |
[68a1a47e2fff6fd1138de638] |
[2] |
[SYSTEM] |
[u-hvhprod10] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vxfvtst4.00q.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:44:20Z] |
[] |
[] |
[] |
[] |
[172.25.19.215] |
[172.25.19.215] |
1 |
Success |
__PSScriptPolicyTest_vxfvtst4.00q.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:44:20 +0000 UTC |
2025-08-17 09:44:20 +0000 UTC |
|
|
|
2025-08-17 09:44:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bd2fb70755ce42ee8c06c2369072646bb3b358d84caad212790cc7a7765f4aa2 |
[68a31bce8786a3280b2dd174] |
[2] |
[SYSTEM] |
[i-nWHLAPP01] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_r4slq4hq.rmb.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:25:48Z] |
[] |
[] |
[] |
[] |
[172.17.146.33] |
[172.17.146.33] |
1 |
Success |
__PSScriptPolicyTest_r4slq4hq.rmb.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:25:48 +0000 UTC |
2025-08-18 12:25:48 +0000 UTC |
|
|
|
2025-08-18 12:25:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c5aff149a88b77be98108f0bcd11aecbc95552b149633da6e4802ebacebb5b7a |
[68a5562678064307c83a4ac0] |
[2] |
[SYSTEM] |
[I-NCTXSA-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbgibpfr.i4d.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T04:59:17Z] |
[] |
[] |
[] |
[] |
[172.17.188.22] |
[172.17.188.22] |
1 |
Success |
__PSScriptPolicyTest_jbgibpfr.i4d.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 04:59:17 +0000 UTC |
2025-08-20 04:59:17 +0000 UTC |
|
|
|
2025-08-20 04:59:18 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c5ed39440ed5c887e029536b2385b4abcb5c92dc545a0aa6da398b6d107d47ec |
[68a17aee0ae38deaa00d340b] |
[2] |
[SYSTEM] |
[i-v3MAppTest] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pwoh1wzv.2ff.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:47:02Z] |
[] |
[] |
[] |
[] |
[172.17.23.50] |
[172.17.23.50] |
1 |
Success |
__PSScriptPolicyTest_pwoh1wzv.2ff.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:47:02 +0000 UTC |
2025-08-17 06:47:02 +0000 UTC |
|
|
|
2025-08-17 06:47:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c64d02709f5a2a0f2b1f7fdce51ea690718e118b044861c776bd216796720ce1 |
[68a27594b1c6255cad9f46e0] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fqfwtzyh.2si.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T00:36:24Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_fqfwtzyh.2si.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 00:36:24 +0000 UTC |
2025-08-18 00:36:24 +0000 UTC |
|
|
|
2025-08-18 00:36:36 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c6b6dc489be976c353613a2e6ccc00459d683607f7016bf7100b54f3840c9de8 |
[68a514957c462c6feed1d6ec] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_645608853d614555ad24aa760135fa91.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:19:28Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_645608853d614555ad24aa760135fa91.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:19:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| be5e9587e3ca556aef9c2cde627026bcf487a2c0577ed5d5878c9045719f8ac0 |
[68a2a383740bfa0e8661429f] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tnnwgcbz.kx3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T03:52:27Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_tnnwgcbz.kx3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 03:52:27 +0000 UTC |
2025-08-18 03:52:27 +0000 UTC |
|
|
|
2025-08-18 03:52:35 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| be82e978adc037a3a56135bf555c5d4442c67d8c4e58572201d2349fba6f7b0e |
[68a1951058f868128a49bffc] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_o1ghm1vm.52u.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:38:28Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_o1ghm1vm.52u.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:38:28 +0000 UTC |
2025-08-17 08:38:28 +0000 UTC |
|
|
|
2025-08-17 08:38:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bf42bb8c665225c28749685e2f8b661c02baa300701ba9ec2b32e0703b41073c |
[68a5239e621d09b2b1ed5e5f] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.Helpers.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[328d30770ede8b155abe1fa9a87ef03a] |
[7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708] |
[7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44] |
[2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Stanley.Infra.CommLayerBase.Helpers.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Stanley.Infra.CommLayerBase.Helpers |
9728 |
328d30770ede8b155abe1fa9a87ef03a |
Stanley.Infra.CommLayerBase.Helpers |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:24 +0000 UTC |
2023-06-15 02:36:24 +0000 UTC |
7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708 |
7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44 |
2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bff9aab5dab9e2075db20262c2f58cf81db4c6ee97c513c599029bf441282a7a |
[68a15648b3fb2a7f3ef2c4b5] |
[2] |
[SYSTEM] |
[WHL-STOREFRONT1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfas0q2g.4wq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:10:35Z] |
[] |
[] |
[] |
[] |
[172.18.112.145] |
[172.18.112.145] |
1 |
Success |
__PSScriptPolicyTest_nfas0q2g.4wq.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:10:35 +0000 UTC |
2025-08-17 04:10:35 +0000 UTC |
|
|
|
2025-08-17 04:10:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c06ca9f2522de6b59a5bdf15e8be2f96e2ca48ae6a1fdef55b7de47d63ba64aa |
[68a511b1e4d3ba2a8e3af5c3] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:07:02Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:07:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c0a8ed297345fae7a0e2c5e97b92df98da9107d5ebea48a0ef63d094ca6f0d99 |
[68a4ccc785b914a60d739e42, 68a4d07753a851daf11e692c, 68a4d2d1ff2b441b84428124] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[D:\Qdx_work\custom_scripts\CloverleafAutoStart.ps1] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T19:13:00Z, 2025-08-19T19:23:00Z, 2025-08-19T19:33:00Z] |
[6070a9a674793a659ece679e56c0413c] |
[55204a5d25518210d99df5e3908b07b14d5c3c17] |
[c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78] |
[9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
CloverleafAutoStart.ps1 |
D:\Qdx_work\custom_scripts\ |
|
3464 |
6070a9a674793a659ece679e56c0413c |
|
|
Not Signed |
2020-04-27 17:40:48 +0000 UTC |
2020-04-27 17:40:48 +0000 UTC |
55204a5d25518210d99df5e3908b07b14d5c3c17 |
c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78 |
9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c0ebe5d656d755ce4f5f399105a936b82b36951fc2640a2e64c72316414e16a1 |
[68a55d10a6e1a08ed492f8f2] |
[2] |
[SYSTEM] |
[DP-Jackson] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_imgqx5ud.rnw.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:28:42Z] |
[] |
[] |
[] |
[] |
[172.31.113.2] |
[172.31.113.2] |
1 |
Success |
__PSScriptPolicyTest_imgqx5ud.rnw.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:28:42 +0000 UTC |
2025-08-20 05:28:42 +0000 UTC |
|
|
|
2025-08-20 05:28:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ca0f677ea03e930eab6d803e0015635200a3e4a1de4391cd78a7c6b33b722ad7 |
[68a3146b5f0c41860c8c8550, 68a3146b5f0c41860c8c8576] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\textwrap.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[a983cb636c494edd66f26bbb0d50debd] |
[b1e72b671ead0a94705dc8fce5642bba7d658c8c] |
[07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb] |
[83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
textwrap.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
17938 |
a983cb636c494edd66f26bbb0d50debd |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
b1e72b671ead0a94705dc8fce5642bba7d658c8c |
07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb |
83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c301ca5c745a7ea2471ae58975afc931ee83421bb7d51d06311cce889fd41407 |
[68a17a26093dbf71ffe19bcf] |
[2] |
[SYSTEM] |
[TMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mhcpaqhq.f01.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:43:45Z] |
[] |
[] |
[] |
[] |
[172.17.246.16] |
[172.17.246.16] |
1 |
Success |
__PSScriptPolicyTest_mhcpaqhq.f01.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:43:45 +0000 UTC |
2025-08-17 06:43:45 +0000 UTC |
|
|
|
2025-08-17 06:43:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c3667c28750579a47d4170b1f5e1442a386fe1cebe6246179a6c27d1b53c2de5 |
[68a2324e8d5b232a80ba583b] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrvnheh0.wft.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:45:56Z] |
[] |
[] |
[] |
[] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
__PSScriptPolicyTest_jrvnheh0.wft.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:45:56 +0000 UTC |
2025-08-17 19:45:56 +0000 UTC |
|
|
|
2025-08-17 19:49:34 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c3a00c139fea67d3b256e9119dd35e0bbaef4fd51a800022f693a0f157bdcdd3 |
[68a3240b38d5d5195ff8315f] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\tmpEXO_h3psaegy.pzf.psm1] |
[Servers] |
[Servers Audit] |
[v2253.852] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T13:00:50Z] |
[4337273c42ec7d667280321798203a81] |
[6cecb446e53d0bceb0598e63c47129b289f76680] |
[01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b] |
[81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_h3psaegy.pzf.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\ |
|
2290479 |
4337273c42ec7d667280321798203a81 |
|
|
Not Signed |
2025-08-18 13:00:48 +0000 UTC |
2025-08-18 13:00:48 +0000 UTC |
6cecb446e53d0bceb0598e63c47129b289f76680 |
01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b |
81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493 |
2025-08-18 13:00:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c47706e64fc4a76a6a9491ecb56a34662e8b6e68399c73a5b2cf319b46ada3a6 |
[68a3364098a9a1f4e6f8e02d] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kft34fye.mii.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T14:18:32Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_kft34fye.mii.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 14:18:32 +0000 UTC |
2025-08-18 14:18:32 +0000 UTC |
|
|
|
2025-08-18 14:18:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c48ee8109815a5443615dc6932ffe0a3fa4d8ba3ba73cc481a0eea00785f76be |
[68a16fc09b16dfa10f38c979] |
[2] |
[SYSTEM] |
[WH1EMGSQL1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hkdjfhdi.ivf.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:59:23Z] |
[] |
[] |
[] |
[] |
[172.18.99.115] |
[172.18.99.115] |
1 |
Success |
__PSScriptPolicyTest_hkdjfhdi.ivf.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:59:23 +0000 UTC |
2025-08-17 05:59:23 +0000 UTC |
|
|
|
2025-08-17 05:59:28 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c534f09b89879437205c2c070f09e847f00ca5462acc567fab450fe01d667c57 |
[68a3146b5f0c41860c8c8505, 68a3146b5f0c41860c8c852b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\re\__pycache__\_constants.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[ad6cb6b298821e0783d24bd040205667] |
[1068bc2e3f910a9d0d9a00b67dc90a726720fdc8] |
[fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0] |
[47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_constants.cpython-313.pyc |
C:\Program Files\Python\Lib\re\__pycache__\ |
|
5382 |
ad6cb6b298821e0783d24bd040205667 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
1068bc2e3f910a9d0d9a00b67dc90a726720fdc8 |
fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0 |
47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c535b5c57d55794d09c08b5caba7399add0cfd2043491bafb35453d6aebff17a |
[68a4ccc785b914a60d739e53, 68a4ce1fc826337212f53bf1, 68a4d07753a851daf11e693c, 68a4d07753a851daf11e6952, 68a4d2d1ff2b441b84428134, 68a4d2d1ff2b441b8442814b] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\API.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[6ddc8640259abb08c4a7aab5963f9132] |
[64c7beca37e5f11c99f66bf2ba9aa4d549147813] |
[c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710] |
[7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
API.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\ |
|
17920 |
6ddc8640259abb08c4a7aab5963f9132 |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:13:04 +0000 UTC |
64c7beca37e5f11c99f66bf2ba9aa4d549147813 |
c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710 |
7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8 |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ccb32d4642faabe002c701e6be6e3b163a048083828be362348f794b0f9747a5 |
[68a5caae25c43d3642b34826, 68a5ccf2ddfdba423e48862c] |
[2] |
[CA_Jnt_Talis1] |
[VM-TalisWave] |
[WVUHS] |
[C:\Talis\Atlas\temp\InstallSqlExpress.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe, C:\Windows\System32\svchost.exe] |
[2025-08-20T13:16:21Z, 2025-08-20T13:17:20Z] |
[81440bc342bcb6afe5f64e770c1dbc77] |
[6686557cf11cb209763c41f954d1cf9a8a700aa3] |
[3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41] |
[21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
InstallSqlExpress.ps1 |
C:\Talis\Atlas\temp\ |
|
833 |
81440bc342bcb6afe5f64e770c1dbc77 |
|
|
Not Signed |
2025-08-20 13:08:55 +0000 UTC |
2025-08-20 13:08:55 +0000 UTC |
6686557cf11cb209763c41f954d1cf9a8a700aa3 |
3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41 |
21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5 |
2025-08-20 13:16:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cce7f425a62f12d67abc77f70988d9a7d3825fea909f25f1bab56920c1547a13 |
[68a523a99ba7c92b34976f98] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViews.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:42Z] |
[348f84ac608fd0a3180668c30900baba] |
[0503248ce5fe744f1ee7cfad7988b298938e0be5] |
[bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6] |
[ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
SystemManagerViews.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
SystemManagerViews |
1011712 |
348f84ac608fd0a3180668c30900baba |
SystemManagerViews |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:52 +0000 UTC |
2023-06-15 02:37:52 +0000 UTC |
0503248ce5fe744f1ee7cfad7988b298938e0be5 |
bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6 |
ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4 |
2025-08-20 01:23:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ccfd4b0b29921797227890e20977974f0fe6926fb9f986a398ed037177b6857b |
[68a375ce012e144044008db2] |
[2] |
[ellisonmea] |
[I-CAJump] |
[WVUHS] |
[C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\tmpEXO_panxtvgi.v0r.psm1] |
[Servers] |
[Servers Audit] |
[v2264.862] |
[] |
[Not Signed] |
[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T18:49:45Z] |
[689e2c4d14099359d012d5e70e628648] |
[d263ae2c2def641b81fa637242f6d8fc9e91210e] |
[bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30] |
[baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_panxtvgi.v0r.psm1 |
C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\ |
|
2308296 |
689e2c4d14099359d012d5e70e628648 |
|
|
Not Signed |
2025-08-18 18:49:44 +0000 UTC |
2025-08-18 18:49:44 +0000 UTC |
d263ae2c2def641b81fa637242f6d8fc9e91210e |
bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30 |
baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be |
2025-08-18 18:49:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cdcb9886eec269fe986be220ddc0a58d7cd307bdf3ecc1f48390b918bd56101d |
[68a24655c6a8e4430722eaf8] |
[2] |
[SYSTEM] |
[i-nCtx-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_ewmsmzj2.prq.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:14:55Z] |
[] |
[] |
[] |
[] |
[172.17.146.9] |
[172.17.146.9] |
1 |
Success |
__PSScriptPolicyTest_ewmsmzj2.prq.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:14:55 +0000 UTC |
2025-08-17 21:14:55 +0000 UTC |
|
|
|
2025-08-17 21:15:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cdf46074d14821e21128b09a9ee98fb39f61a843bcc71e0415e36bdba7fb2bf3 |
[68a25c735f19cff323c8f40b] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zqbn2i55.u22.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:49:18Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_zqbn2i55.u22.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:49:18 +0000 UTC |
2025-08-17 22:49:18 +0000 UTC |
|
|
|
2025-08-17 22:49:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c826e8208f2d2a00b4b3b99d67e4e058607f19a4ed623b7b0d541f3b6d51ab05 |
[68a3146b5f0c41860c8c84fe, 68a3146b5f0c41860c8c8531] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\copyreg.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[2e6e1613760385356bd6e3679ca43aef] |
[61aee40c895eb5ae249aec746a1e337d43ec0537] |
[cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e] |
[b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
copyreg.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
7544 |
2e6e1613760385356bd6e3679ca43aef |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
61aee40c895eb5ae249aec746a1e337d43ec0537 |
cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e |
b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c8e0699e1ad7ef4335945a3df4a6b09fb48c4d6664c52528ef1b438a3f191dbc |
[68a5239e621d09b2b1ed5e49] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringGUI.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:33Z] |
[fdb5557de080a49af4fe2d6f23075dce] |
[593450197694057604548da9fe073096fe4fb5dc] |
[d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5] |
[dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
MonitoringGUI.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
GUI |
125952 |
fdb5557de080a49af4fe2d6f23075dce |
GUI |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:20 +0000 UTC |
2023-06-15 02:38:20 +0000 UTC |
593450197694057604548da9fe073096fe4fb5dc |
d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5 |
dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c93a02f29261eb3cd4a6ea20651aa00d111b39dbd8fac6f9bc6bbab25e805335 |
[68a2c44535b1d4ea68c6ff9a] |
[2] |
[SYSTEM] |
[i-nctxsf-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_cxplm4ri.gl2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T06:12:08Z] |
[] |
[] |
[] |
[] |
[172.17.146.22] |
[172.17.146.22] |
1 |
Success |
__PSScriptPolicyTest_cxplm4ri.gl2.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 06:12:08 +0000 UTC |
2025-08-18 06:12:08 +0000 UTC |
|
|
|
2025-08-18 06:12:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c9448c282682d6dcd44a45c57f7e86467ab4d1b9c2810d14ec339bee64373cfe |
[68a558192779d54c7ac75dd5] |
[2] |
[SYSTEM] |
[I-NCTXSA-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t2efjwra.hhh.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:07:34Z] |
[] |
[] |
[] |
[] |
[172.17.188.22] |
[172.17.188.22] |
1 |
Success |
__PSScriptPolicyTest_t2efjwra.hhh.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:07:34 +0000 UTC |
2025-08-20 05:07:34 +0000 UTC |
|
|
|
2025-08-20 05:07:37 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cf53580ed462204e6798cf3e5b7b95b46bfd77b6bbf98a5de5659f9b08b49f86 |
[68a31e1752cf7ae3b21d642b] |
[2] |
[SYSTEM] |
[i-nCGChaSdb] |
[NT AUTHORITY] |
[C:\Program Files\Affymetrix\ChASDx\DBScripts\backup-db-dx.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T12:31:00Z] |
[ba9bc91d6cf75474827bdbe5cb54143a] |
[7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec] |
[4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846] |
[34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543] |
[172.17.250.114] |
[172.17.250.114] |
1 |
Success |
backup-db-dx.bat |
C:\Program Files\Affymetrix\ChASDx\DBScripts\ |
|
8176 |
ba9bc91d6cf75474827bdbe5cb54143a |
|
|
Not Signed |
2024-04-16 21:08:16 +0000 UTC |
2024-04-16 21:08:16 +0000 UTC |
7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec |
4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846 |
34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543 |
2025-08-11 12:31:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cfc7ff5198de9882b23541e72a7e55009b732822186d4e0fbe5d4de605ac2fa9 |
[68a606ccc8c5aba8e6424dc3, 68a62c4fe0cb7d1d0b6ef98f] |
[2] |
[NETWORK SERVICE] |
[u-NFP2] |
[NT AUTHORITY] |
[C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe] |
[Servers] |
[Servers Audit] |
[v2307.897, v2310.898] |
["C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T17:27:31Z, 2025-08-20T20:05:48Z] |
[72c43b468c92cb9fc0aff73b9a553afc] |
[da0df395838297b918fa34920aed9a840c8b2c4b] |
[1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5] |
[2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee] |
[172.25.17.195] |
[172.25.17.195] |
1 |
Success |
HL7TrackerService.exe |
C:\Program Files (x86)\FormFast\HL7TrackerService\ |
FormFast.FastPrint.HL7TrackerService |
70656 |
72c43b468c92cb9fc0aff73b9a553afc |
FormFast.FastPrint.HL7TrackerService |
23.6.0.20130 |
Not Signed |
2023-06-20 18:25:04 +0000 UTC |
2023-06-20 18:25:04 +0000 UTC |
da0df395838297b918fa34920aed9a840c8b2c4b |
1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5 |
2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee |
2025-07-01 15:13:40 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d02dde50a8ac8cff74d90ba4819f52d21b089f7add0407bfe8e41f2390d4be90 |
[68a523949cec397f02de9f48] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseGUI.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:26Z] |
[a1566f1d2da1f9413f76dc2b914f4311] |
[6dcf1ac94eb4a724f25d13833404c64f4a0f1f16] |
[fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307] |
[f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
BaseGUI.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
BaseGUI |
62464 |
a1566f1d2da1f9413f76dc2b914f4311 |
BaseGUI |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:42 +0000 UTC |
2023-06-15 02:37:42 +0000 UTC |
6dcf1ac94eb4a724f25d13833404c64f4a0f1f16 |
fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307 |
f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d070b1af61401b6ac25e9d3acc825add99084a26832db9f5f5cb23017c2148a3 |
[68a38065cabe22b27c6c0f7d] |
[2] |
[SYSTEM] |
[i-nctxddc-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4sxq3vi5.4r5.ps1] |
[Servers] |
[Servers Audit] |
[v2267.864] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T19:34:53Z] |
[] |
[] |
[] |
[] |
[172.17.146.23] |
[172.17.146.23] |
1 |
Success |
__PSScriptPolicyTest_4sxq3vi5.4r5.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 19:34:53 +0000 UTC |
2025-08-18 19:34:53 +0000 UTC |
|
|
|
2025-08-18 19:35:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d095c35b7eefd84a40162c8fd75586439afdf8d43f8194e076806d6ba1d80ea8 |
[68a48674c4cb2500be692640] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Business.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:51Z] |
[1282e0d899b8c6c77293157e628f8fe9] |
[b1bc26f40ef3caf7a21eb88d27f9a8041234c646] |
[17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4] |
[fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Clinical.Business.dll |
C:\Stryker\iBed Server Application\Stryker.Clinical\ |
Stryker.iBedServer.Clinical.Business |
15360 |
1282e0d899b8c6c77293157e628f8fe9 |
Stryker.iBedServer.Clinical.Business |
1.0.0 |
Not Signed |
2023-03-16 10:22:30 +0000 UTC |
2023-03-16 10:22:30 +0000 UTC |
b1bc26f40ef3caf7a21eb88d27f9a8041234c646 |
17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4 |
fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed |
2025-07-15 14:08:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d1a2e822a1ea07df47bc922137f71f102d160466cabe022f2deea5317148a526 |
[68a3146b5f0c41860c8c8551, 68a3146b5f0c41860c8c8577] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\_colorize.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[b7b78adc50cac8e240a21e27725b637a] |
[a53749b2d528d575041644b00e9efe548bcf3000] |
[43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0] |
[0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_colorize.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
2722 |
b7b78adc50cac8e240a21e27725b637a |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
a53749b2d528d575041644b00e9efe548bcf3000 |
43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0 |
0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d21817fe72ac59de692437e50c43dd1bae22fd9bfd9d5fe6f002ecc5001133aa |
[68a4ccd13efa8341e1766c85] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setroot_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:13:11Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setroot_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:13:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| caaad5beee085968aa4b7c606e87506f20d0a5fc9f86604c2f71804bea252c94 |
[68a4cf29dfc75d42acc2fee7] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\Windows\Temp\setsite_1.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T19:23:11Z] |
[] |
[] |
[] |
[] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
setsite_1.cmd |
C:\Windows\Temp\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 19:23:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cb91fc48deaa953fa6bc86e50101278ba472aa46d3997cf1d2f862e9d2faafc6 |
[68a17efae2809bffe9dd0ee5, 68a2d0803665ae20b1f78f7c, 68a42221091a6202e3d1b16e, 68a573b695791e485505569b] |
[2] |
[hyperwebsvc] |
[I-NCTXEHH-001] |
[WVUHS] |
[C:\HomeHealth\__SCRIPT REF Files\EpicHHEnvREF_SmartUpdate.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z] |
[2b4fc9419788dc26cf2e48ff48ee8d59] |
[d1cf90955367d76e04a1c2d0fb607bc614829af6] |
[9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85] |
[83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276] |
[172.17.146.25] |
[172.17.146.25] |
1 |
Success |
EpicHHEnvREF_SmartUpdate.bat |
C:\HomeHealth\__SCRIPT REF Files\ |
|
114 |
2b4fc9419788dc26cf2e48ff48ee8d59 |
|
|
Not Signed |
2023-04-26 14:42:09 +0000 UTC |
2025-04-17 14:44:28 +0000 UTC |
d1cf90955367d76e04a1c2d0fb607bc614829af6 |
9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85 |
83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276 |
2025-08-09 07:00:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cbc1e9a027df224d6182596062ef744f07095fa259aef053f60330fdb55f44a1 |
[68a3146b5f0c41860c8c84f9, 68a3146b5f0c41860c8c8527] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\enum.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] |
[b3d34b7698ce20e327b55db5543aa834] |
[9ac116d05a984aff49961679e499920ef973f32f] |
[a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066] |
[602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
enum.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
84563 |
b3d34b7698ce20e327b55db5543aa834 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
9ac116d05a984aff49961679e499920ef973f32f |
a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066 |
602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cbce83feb3a1075e711a778264441ec9227105e1a9573289de7d59af2cf388ff |
[68a5239e621d09b2b1ed5e5c] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShortcutbarMechanism.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:38Z] |
[314aa989c3340e2e4a88551949eec9f2] |
[31bad1d1e4e96b06cf2f126a4e62be93446004da] |
[f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252] |
[7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
ShortcutbarMechanism.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
12288 |
314aa989c3340e2e4a88551949eec9f2 |
|
1.0.8565.40750 |
Not Signed |
2023-06-15 02:38:22 +0000 UTC |
2023-06-15 02:38:22 +0000 UTC |
31bad1d1e4e96b06cf2f126a4e62be93446004da |
f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252 |
7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| cbe345399a7a40adc97084ceb3b564b8954687f82c1ff70e9ce060535e914c87 |
[68a311cdc2d0d6e3eb77f20e] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Get-Sidhistory.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[20ba5446b5e3742b0af6bf5e74c11c45] |
[1e0cd7d9ccc008749c121260de20c255f1dd168b] |
[a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281] |
[5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
Get-Sidhistory.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
213 |
20ba5446b5e3742b0af6bf5e74c11c45 |
|
|
Not Signed |
2022-05-24 18:19:40 +0000 UTC |
2022-06-10 20:28:02 +0000 UTC |
1e0cd7d9ccc008749c121260de20c255f1dd168b |
a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281 |
5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d3618219fd8422d3844101b0d57fa596aee7e01dfa8cb6e7dc95eb9c8cd4818f |
[68a62a808890319de023d467] |
[2] |
[SYSTEM] |
[u-NFP2] |
[NT AUTHORITY] |
[C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe] |
[Servers] |
[Servers Audit] |
[v2310.898] |
["C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe"] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T20:05:16Z] |
[232c2871a4ec6371d7629acb78e34fe5] |
[1feca74aa50c755fa4c7f8d79fa6fa1557a119f0] |
[2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797] |
[6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2] |
[172.25.17.195] |
[172.25.17.195] |
1 |
Success |
FFSchedulerService.exe |
C:\Program Files (x86)\FormFast\Common\ |
FFSchedulerService |
51200 |
232c2871a4ec6371d7629acb78e34fe5 |
FFSchedulerService |
1.0.0.0 |
Not Signed |
2023-06-20 18:28:16 +0000 UTC |
2023-06-20 18:28:16 +0000 UTC |
1feca74aa50c755fa4c7f8d79fa6fa1557a119f0 |
2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797 |
6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2 |
2025-08-20 20:05:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d3d7a66293ebab3af9baba4a16e865aedbb74adae7d5d4cf6ae2dda125ae0e7f |
[68a246235d01fff0e1ca28f1] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_axjq3wng.oka.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:10:43Z] |
[] |
[] |
[] |
[] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
__PSScriptPolicyTest_axjq3wng.oka.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:10:43 +0000 UTC |
2025-08-17 21:10:43 +0000 UTC |
|
|
|
2025-08-17 21:14:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d43a2099c8fd9976bc0e46f7249032ac3e3856f5ba5bc427e68b2d4e7e186585 |
[68a4ccc785b914a60d739e48, 68a4ce1fc826337212f53be2, 68a4ce1fc826337212f53be8, 68a4d07753a851daf11e6932, 68a4d07753a851daf11e6945, 68a4d07753a851daf11e6956, 68a4d2d1ff2b441b8442812a, 68a4d2d1ff2b441b8442813d, 68a4d2d1ff2b441b8442814e] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\Registry.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:06Z, 2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] |
[a203fffcd1d985aadfef505588b0a4cb] |
[76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b] |
[227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c] |
[0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Registry.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\ |
|
158208 |
a203fffcd1d985aadfef505588b0a4cb |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:12:20 +0000 UTC |
76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b |
227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c |
0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d45a86e8eefb45e6d3246ea6244f969b8b01b9308364dec0aa47ef9f138c1891 |
[68a5e018c5b265f07bb9e53a] |
[2] |
[ghermanc] |
[I-CAJump] |
[WVUHS] |
[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\tmpEXO_rudypo3c.3fk.psm1] |
[Servers] |
[Servers Audit] |
[v2295.887] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T14:47:45Z] |
[cf3be61b7b7864bd18276f2a15d1929e] |
[5d5fdacd8a04903f4d950f608f12da17f71b1ee8] |
[31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95] |
[bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmpEXO_rudypo3c.3fk.psm1 |
C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\ |
|
2308419 |
cf3be61b7b7864bd18276f2a15d1929e |
|
|
Not Signed |
2025-08-20 14:47:44 +0000 UTC |
2025-08-20 14:47:44 +0000 UTC |
5d5fdacd8a04903f4d950f608f12da17f71b1ee8 |
31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95 |
bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90 |
2025-08-20 14:47:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d54451027064bc1d6df9f1c3ddee9ad674d26c622b11d3608f5afeb8bbfabf70 |
[68a523949cec397f02de9f47] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseData.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:26Z] |
[b2a5050b7d0bc08167b05bfe29af445d] |
[abaccb61e12a56d1efad87526af3a9e07a3fd55b] |
[77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7] |
[36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
BaseData.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
BaseData |
13824 |
b2a5050b7d0bc08167b05bfe29af445d |
BaseData |
1.0.0.0 |
Not Signed |
2023-06-15 02:37:38 +0000 UTC |
2023-06-15 02:37:38 +0000 UTC |
abaccb61e12a56d1efad87526af3a9e07a3fd55b |
77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7 |
36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d6437530f4cba4030aec0cfaf564dc2f75ffee366a72651fea49297f3e4b4c9b |
[68a31c8cd2481b6854d4f544] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_htoxxven.jj0.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:28:57Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_htoxxven.jj0.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:28:57 +0000 UTC |
2025-08-18 12:28:57 +0000 UTC |
|
|
|
2025-08-18 12:29:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ce6a9577d1e06139cd06bc9a39a07c301700792b3afac3878301dace79349d7c |
[68a194caf9b0b5c55ccb01c0] |
[2] |
[SYSTEM] |
[nt-compass5] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uic3pfdb.jpy.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:37:27Z] |
[] |
[] |
[] |
[] |
[172.29.172.3] |
[172.29.172.3] |
1 |
Success |
__PSScriptPolicyTest_uic3pfdb.jpy.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:37:27 +0000 UTC |
2025-08-17 08:37:27 +0000 UTC |
|
|
|
2025-08-17 08:37:30 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ce84c2abd2888d88b9eed0496c93a5a2ba355c1d7eca42db9bc19048c05b7261 |
[68a165183f1f36f01a2f3ff3, 68a2b69c8b983fbe0c82338e, 68a40846a972cb7f3cce6ebc, 68a5578d6ea23be9f4b23b72] |
[2] |
[SYSTEM] |
[u-vroggerb] |
[NT AUTHORITY] |
[C:\icm\pcce\lb\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z] |
[307a281df67046994ab424072bef8918] |
[ab7e9aeb72c04a2b35eb308f42b3f6fed9012698] |
[e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233] |
[a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94] |
[172.25.196.35] |
[172.25.196.35] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\lb\bin\ |
|
406 |
307a281df67046994ab424072bef8918 |
|
|
Not Signed |
2021-10-07 20:03:35 +0000 UTC |
2021-10-07 20:03:35 +0000 UTC |
ab7e9aeb72c04a2b35eb308f42b3f6fed9012698 |
e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233 |
a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 038390889beb53877bcb82beff610051215f0d7773f5452fbb150d45afe4594b |
[68a46f87474e4ad446dca4d9, 68a4728c1dfbce27769ea0bc] |
[2] |
[my10040sa, SYSTEM] |
[i-nkalani25] |
[WVUHS, NT AUTHORITY] |
[C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\_isuser_0x0409.dll] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\software\Storage Manager Client 20.1.2.14.exe, C:\Windows\SysWOW64\msiexec.exe] |
[C:\Windows\System32\svchost.exe, C:\Windows\System32\msiexec.exe] |
[2025-08-19T12:35:14Z, 2025-08-19T12:35:29Z] |
[92698c5a6197382994093641c6a72d29] |
[f535aab772d9bf505b48124f8e076e830c4af33b] |
[3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0] |
[addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
_isuser_0x0409.dll |
C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\ |
|
24576 |
92698c5a6197382994093641c6a72d29 |
|
|
Not Signed |
2025-08-19 12:35:02 +0000 UTC |
2025-08-19 12:35:02 +0000 UTC |
f535aab772d9bf505b48124f8e076e830c4af33b |
3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0 |
addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24 |
2025-08-19 12:35:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 03f227d3eda403e620c45f4986ee30554111c0ce60910e7d6858e3d887a40a7b |
[68a16f23887230bce1ef3f8c] |
[2] |
[SYSTEM] |
[i-hBMCCure] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxignfvp.mzk.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T05:56:39Z] |
[] |
[] |
[] |
[] |
[172.17.252.100] |
[172.17.252.100] |
1 |
Success |
__PSScriptPolicyTest_nxignfvp.mzk.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 05:56:39 +0000 UTC |
2025-08-17 05:56:39 +0000 UTC |
|
|
|
2025-08-17 05:56:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d9d0fd73379de8bdc1eade22b7cc044fe5b529c69363603fe804c0532eb0c03c |
[68a5119d85fcc7c992c6135c] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T00:06:50Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 00:06:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d9f7d9e7bb23fea463e56b71f502481381b3814bd7cb29a8f6e9e8635902f75b |
[68a55e78808b9b08c1edd7d3] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mctygn31.xjd.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:34:37Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_mctygn31.xjd.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:34:37 +0000 UTC |
2025-08-20 05:34:37 +0000 UTC |
|
|
|
2025-08-20 05:34:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| da41728504a6b8736b7af7e25b17c6b48777776cbbc6ff3872b28fb5d84d9fd1 |
[68a5c233a5c8de03b7ff4fb4] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll] |
[Servers] |
[Servers Audit] |
[v2287.879] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:40:11Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 12:40:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| da692790deb2efd860d435719a2efc139b3cc1dd0d01b5b764d693e57a326554 |
[68a5c8eceb9e7b7716dce207] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:08:58Z] |
[fcbd65813fcd1136ccc166072f2645f2] |
[750592861995231496d153cd8968f6d0ec9d4b52] |
[79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0] |
[585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1 |
C:\_work_devops_mdi\_temp\ |
|
379 |
fcbd65813fcd1136ccc166072f2645f2 |
|
|
Not Signed |
2025-08-20 13:08:58 +0000 UTC |
2025-08-20 13:08:58 +0000 UTC |
750592861995231496d153cd8968f6d0ec9d4b52 |
79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0 |
585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682 |
2025-08-20 13:09:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| db47e797535a71d7971867b3e33ada1549410843ca9d2a361bfe802c5ba86eeb |
[68a523949cec397f02de9f55] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticUnitTests.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:29Z] |
[7990057f38e4716679765f0a52c270d1] |
[48fb434df935c9ab7759f840f7e7924663f6b621] |
[f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3] |
[cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
DiagnosticUnitTests.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
DiagnosticUnitTests |
25088 |
7990057f38e4716679765f0a52c270d1 |
DiagnosticUnitTests |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:06 +0000 UTC |
2023-06-15 02:38:06 +0000 UTC |
48fb434df935c9ab7759f840f7e7924663f6b621 |
f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3 |
cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d2a581d4a6d27c24440d4a37a52ded76d4f22cdb5d200ed7939e4f1cf9ef63d9 |
[68a2c16aad07b1f3cadf8bd3] |
[2] |
[SQLSERVERAGENT] |
[SUNR1MSD] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_yck4oyto.shs.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] |
[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] |
[2025-08-18T06:00:00Z] |
[] |
[] |
[] |
[] |
[172.24.20.7] |
[172.24.20.7] |
1 |
Success |
__PSScriptPolicyTest_yck4oyto.shs.ps1 |
C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 06:00:00 +0000 UTC |
2025-08-18 06:00:00 +0000 UTC |
|
|
|
2025-08-18 06:00:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d326cab93b94da954e3255e3ae9798ccbb29cafdd6a42ec86f49db136837a447 |
[68a2cfaafd36357b5aad62ea] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\tmpEXO_vlwbbir4.r3y.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T07:00:50Z] |
[8e1f2d25559f493185469321f6bbdb4c] |
[d46dfdcb82328fa63f83d551ae51ef321adbbce9] |
[3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759] |
[d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_vlwbbir4.r3y.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\ |
|
2290479 |
8e1f2d25559f493185469321f6bbdb4c |
|
|
Not Signed |
2025-08-18 07:00:48 +0000 UTC |
2025-08-18 07:00:48 +0000 UTC |
d46dfdcb82328fa63f83d551ae51ef321adbbce9 |
3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759 |
d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d |
2025-08-18 07:00:58 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d3445778ced79263ad697bbbeef21f6a13f06a58f291cec1a239efd0ef8bcbff |
[68a4ccc785b914a60d739e57, 68a4d07753a851daf11e693f, 68a4d2d1ff2b441b84428137] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\Glob.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:07Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z] |
[473ab010839c2be697c44e2949f9e203] |
[00022b4d9500e922d2e442a721ba5ecde46ffa26] |
[fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d] |
[e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Glob.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\ |
|
22528 |
473ab010839c2be697c44e2949f9e203 |
|
|
Not Signed |
2021-10-20 13:41:12 +0000 UTC |
2016-12-02 07:11:31 +0000 UTC |
00022b4d9500e922d2e442a721ba5ecde46ffa26 |
fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d |
e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d7116e047fbcb4bf045d2268cf418e6cb6fc8102c12196f3727597e8464497dd |
[68a16556adb18f56bab6ec7b, 68a2b4a8c289c4a5fdc2edb1, 68a4085529d877e962e90ae7, 68a557e71e5d7a1efef2595c] |
[2] |
[SYSTEM] |
[u-vpg1b] |
[NT AUTHORITY] |
[C:\icm\pcce\PG2B\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[ddc535922ab8443cac70e8a5a1b1ca96] |
[de0bed789f1c7a1ed257d4495b986eded933a71b] |
[3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05] |
[4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065] |
[172.25.196.36] |
[172.25.196.36] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\PG2B\bin\ |
|
410 |
ddc535922ab8443cac70e8a5a1b1ca96 |
|
|
Not Signed |
2021-10-07 20:04:37 +0000 UTC |
2021-10-07 20:04:37 +0000 UTC |
de0bed789f1c7a1ed257d4495b986eded933a71b |
3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05 |
4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d79c2392afb4ba0f2422e52d1384a3c935e60c579ce42b2ad0c7ff9b4f41e6ea |
[68a320afd74235903a162cdc] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\tmp_s4vxl2td.srp.psm1] |
[Servers] |
[Servers Audit] |
[v2251.850] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T12:46:32Z] |
[3334cf3826bfe1d724ba53ca9ff4e71c] |
[2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216] |
[333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1] |
[aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
tmp_s4vxl2td.srp.psm1 |
C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\ |
|
4669944 |
3334cf3826bfe1d724ba53ca9ff4e71c |
|
|
Not Signed |
2025-08-18 12:46:32 +0000 UTC |
2025-08-18 12:46:32 +0000 UTC |
2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216 |
333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1 |
aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f |
2025-08-18 12:46:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 07a30398c07f3854e1a7c3bd58c01fafe25c6a7d1bb13feea789727020a888b2 |
[68a17a44cb9bfce9795803bd] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tw4phzvm.nwz.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:44:12Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_tw4phzvm.nwz.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:44:12 +0000 UTC |
2025-08-17 06:44:12 +0000 UTC |
|
|
|
2025-08-17 06:44:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 07c5a9e87f8d1342d99a2d1d8ff7895f21fbb4d1eb322cd2420fb24fe5e51948 |
[68a36b1bb41b8f9dba5eed01] |
[2] |
[my10040sa] |
[i-hventana] |
[WVUHS] |
[D:\InterSystems\HSFoundation\bin\csystray.exe] |
[Servers] |
[Servers Audit] |
[v2264.862] |
["D:\InterSystems\HSFoundation\bin\csystray.exe" ] |
[Not Signed] |
[C:\Windows\explorer.exe] |
[C:\Windows\System32\userinit.exe] |
[2025-08-18T17:54:24Z] |
[fdba33aaa9751de8b7604fbf6dfb51c8] |
[71560cdf025fc32080b07eca0f4247a77d960368] |
[56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426] |
[18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d] |
[172.17.253.63] |
[172.17.253.63] |
1 |
Success |
csystray.exe |
D:\InterSystems\HSFoundation\bin\ |
Cache' Cube |
1354240 |
fdba33aaa9751de8b7604fbf6dfb51c8 |
Cache' |
2017.2.2.865.3.19109 |
Not Signed |
2019-07-16 21:11:24 +0000 UTC |
2019-07-16 21:11:24 +0000 UTC |
71560cdf025fc32080b07eca0f4247a77d960368 |
56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426 |
18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d |
2025-06-02 14:01:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 07e92a00627641ee1a5bd7dd8c11fca9dc02849587920392ed696a311e270f34 |
[68a1a4e2395a90b784ea5df9] |
[2] |
[SYSTEM] |
[U-nCTX-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zeppjcbv.oxo.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:45:59Z] |
[] |
[] |
[] |
[] |
[172.25.246.19] |
[172.25.246.19] |
1 |
Success |
__PSScriptPolicyTest_zeppjcbv.oxo.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:45:59 +0000 UTC |
2025-08-17 09:45:59 +0000 UTC |
|
|
|
2025-08-17 09:46:10 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 082ee54996b9d1c387dd5fba170e1b0ca068decddc056bf52d1ed770debb2743 |
[68a31b1aa6cbff78a3c29454] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:22:44Z] |
[5178c69f2009d11787441469d3cf852c] |
[b98a92206f5e709e937c34e092b2d601dd1408d0] |
[ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568] |
[9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2199 |
5178c69f2009d11787441469d3cf852c |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 12:22:40 +0000 UTC |
b98a92206f5e709e937c34e092b2d601dd1408d0 |
ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568 |
9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51 |
2025-08-18 12:22:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 087e4a37a25c5d223418e7436fb620da2355df097dc7e784d42a27eb285e705f |
[68a3146b5f0c41860c8c84ef, 68a3146b5f0c41860c8c8549] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\_weakrefset.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] |
[c3a0dbdac023a9bed4a30ae4a485e887] |
[59ea990ad4dc88bc52852b0d7349a1512269acb2] |
[16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e] |
[e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_weakrefset.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
12041 |
c3a0dbdac023a9bed4a30ae4a485e887 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
59ea990ad4dc88bc52852b0d7349a1512269acb2 |
16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e |
e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 08b51bdd723445a16a1459d004236362881607ad0bda1cded1d8419840e45654 |
[68a45bd8dc6569137dd741b1] |
[2] |
[SYSTEM] |
[TMH-CTX-APP4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kt0kbq03.23l.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T11:11:09Z] |
[] |
[] |
[] |
[] |
[172.17.246.19] |
[172.17.246.19] |
1 |
Success |
__PSScriptPolicyTest_kt0kbq03.23l.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 11:11:09 +0000 UTC |
2025-08-19 11:11:09 +0000 UTC |
|
|
|
2025-08-19 11:11:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 08f4b407953309b37462a1b49111c0346f505c18df73ad795fe1f3d08a26a13c |
[68a2407e7f644124333c5597] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_az4bceeu.ygt.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:49:53Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_az4bceeu.ygt.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:49:53 +0000 UTC |
2025-08-17 20:49:53 +0000 UTC |
|
|
|
2025-08-17 20:50:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 09225ceef00a8012fc441f581bb567e63e4d8c0379b8a9466e29ca79db1e0fd3 |
[68a1a41aafa35cf692bdcd7a] |
[2] |
[SYSTEM] |
[U-nCTX-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4hscutvi.yka.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:42:47Z] |
[] |
[] |
[] |
[] |
[172.25.246.19] |
[172.25.246.19] |
1 |
Success |
__PSScriptPolicyTest_4hscutvi.yka.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:42:47 +0000 UTC |
2025-08-17 09:42:47 +0000 UTC |
|
|
|
2025-08-17 09:42:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 092d18bd968e95133e7af93ebf48edda4dacbff12db23935b3fda6156292f445 |
[68a23262644a537a218593af] |
[2] |
[SYSTEM] |
[i-nCTX-CC-PRD1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ngnjcvkf.sli.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:49:46Z] |
[] |
[] |
[] |
[] |
[172.17.146.2] |
[172.17.146.2] |
1 |
Success |
__PSScriptPolicyTest_ngnjcvkf.sli.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:49:46 +0000 UTC |
2025-08-17 19:49:46 +0000 UTC |
|
|
|
2025-08-17 19:49:54 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| db952a6299fb8c832b4006433c766c58a449e5b3da78577807051ea80e74724c |
[68a4cc4fe7cc38673861dc6c] |
[2] |
[my10040sa] |
[i-ncapsule12] |
[WVUHS] |
[C:\software\WindowsDefenderATPLocalOnboardingScript.cmd] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T19:11:05Z] |
[5cbcac73eacda04bf93734eac54ec250] |
[b6a7d80a56fd86c90b2b84c0bea58308a83abad3] |
[1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc] |
[84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
WindowsDefenderATPLocalOnboardingScript.cmd |
C:\software\ |
|
17420 |
5cbcac73eacda04bf93734eac54ec250 |
|
|
Not Signed |
2025-08-15 21:00:30 +0000 UTC |
2025-08-19 18:11:40 +0000 UTC |
b6a7d80a56fd86c90b2b84c0bea58308a83abad3 |
1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc |
84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4 |
2025-08-19 19:11:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| db9f7bd0a28a1567fd07b17ffb7689bf2e9b03d046a94003d0c62fc2f45bd648 |
[68a4ccc785b914a60d739e55, 68a4ce1fc826337212f53bf2, 68a4d07753a851daf11e693d, 68a4d07753a851daf11e6954, 68a4d2d1ff2b441b84428135, 68a4d2d1ff2b441b8442814c] |
[2] |
[SYSTEM] |
[ccwtest] |
[NT AUTHORITY] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\Pipe.dll] |
[Servers] |
[Servers Audit] |
[v2283] |
[] |
[Not Signed] |
[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] |
[33426740c0243bb202d68a135106ecb9] |
[7b96d6dad1ed33ea163a6650fe03599778926ab5] |
[7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307] |
[5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a] |
[10.36.132.49] |
[10.36.132.49] |
1 |
Success |
Pipe.dll |
C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\ |
|
20992 |
33426740c0243bb202d68a135106ecb9 |
|
|
Not Signed |
2021-10-20 13:41:11 +0000 UTC |
2016-12-02 07:12:48 +0000 UTC |
7b96d6dad1ed33ea163a6650fe03599778926ab5 |
7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307 |
5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a |
2025-08-19 19:13:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dbe1be4ea777f96af8e8efc887e486012f84255f819c5bc54016fbc01c0513b5 |
[68a3e79bb5e28efad9fbee2b] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T02:55:20Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 02:55:23 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dbf17863020ad597586a772324b5f8a58d30e5317860ed83a8759f3fee25c2ae |
[68a17c6313d38093271e4d7e, 68a2cde79ef546c806451f9c, 68a4212d6d0e46c2f152938e, 68a5711ca55e4f736b7b2bfb] |
[2] |
[WVUHPAN] |
[i-NPANHS] |
[HS] |
[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-17T06:51:03Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z] |
[5359fd72aed1c21485d8508751b4089a] |
[3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec] |
[191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b] |
[f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d] |
[172.17.253.167] |
[172.17.253.167] |
1 |
Success |
no-ie.ps1 |
C:\Program Files\Quest Software\Management Shell for AD\ |
|
1574 |
5359fd72aed1c21485d8508751b4089a |
|
|
Not Signed |
2022-05-17 12:28:16 +0000 UTC |
2022-05-17 19:02:24 +0000 UTC |
3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec |
191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b |
f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d |
2025-08-09 06:51:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dc10a0514210898ed1dbd718a2c4e7b4c160d38483e64aa119d92eb55353f3bc |
[68a3146b5f0c41860c8c8555] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\locale.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z] |
[1924fbd93c01ce7df32aa9d6789abc1e] |
[5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b] |
[a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1] |
[e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
locale.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
58313 |
1924fbd93c01ce7df32aa9d6789abc1e |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b |
a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1 |
e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dc2d377b573c836bcfbf1885b27a262786b50fb097e7a3d6a25d8a56f2771131 |
[68a275a87ae917016bf0f3a9] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_w2kz3vcr.g3b.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T00:36:45Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_w2kz3vcr.g3b.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 00:36:45 +0000 UTC |
2025-08-18 00:36:45 +0000 UTC |
|
|
|
2025-08-18 00:36:56 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dc4656d6b231fd607385735cbcd7eed759506b2415bd7a40671abe8282eb0612 |
[68a1755706bbf9d9f204ab88] |
[2] |
[SYSTEM] |
[i-hvhprod01] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kijrqnm.b1z.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:23:11Z] |
[a3bac681cf65fc3842b038012980eae3] |
[54945680ce53b32d40e084ebe34cd3d4ac330594] |
[dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a] |
[d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4] |
[172.17.22.182] |
[172.17.22.182] |
1 |
Success |
__PSScriptPolicyTest_1kijrqnm.b1z.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
a3bac681cf65fc3842b038012980eae3 |
|
|
Not Signed |
2025-08-17 06:23:11 +0000 UTC |
2025-08-17 06:23:11 +0000 UTC |
54945680ce53b32d40e084ebe34cd3d4ac330594 |
dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a |
d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4 |
2025-08-17 06:23:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dc61a774db540e08caa944d187b5fe5a72904a7a67839ac49d20c67fcdf05b05 |
[68a245fbaa03fce1f3591138] |
[2] |
[SYSTEM] |
[GEEA2023] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_itgpliwy.fxx.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T21:09:58Z] |
[] |
[] |
[] |
[] |
[172.29.132.47] |
[172.29.132.47] |
1 |
Success |
__PSScriptPolicyTest_itgpliwy.fxx.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 21:09:58 +0000 UTC |
2025-08-17 21:09:58 +0000 UTC |
|
|
|
2025-08-17 21:13:36 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dcb6f710e34a6ba8e3494bd41b1847ee91db7430f961f80d5db0ff4c4feaeae9 |
[68a48674c4cb2500be69263e, 68a48674c4cb2500be692650] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Common.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Common.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z] |
[efce77c5c92dc4a8c516d430070e7b96] |
[2baab49956994f6a532f589386b922aeb5ad1e6e] |
[b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753] |
[992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Common.dll |
C:\Stryker\iBed Server Application\Stryker.Clinical\ |
Stryker.iBedServer.Common |
26624 |
efce77c5c92dc4a8c516d430070e7b96 |
Stryker.iBedServer.Common |
1.0.0 |
Not Signed |
2023-03-16 10:22:14 +0000 UTC |
2023-03-16 10:22:14 +0000 UTC |
2baab49956994f6a532f589386b922aeb5ad1e6e |
b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753 |
992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd |
2025-07-15 14:08:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dcb83c4b7ea70aefe52299b701b5109ef1e0f8c9388fc04a8ed85e1425206a04 |
[68a3f8c69a8abcb93d00959e, 68a54a4f1d8af79f39037b08] |
[2] |
[svc_utn_nemoq] |
[I-NUHNQENG] |
[WVUHS] |
[E:\NQS\Close Nemo-Q.bat] |
[Servers] |
[Servers Audit] |
[v2272.867, v2284.877] |
[] |
[Not Signed] |
[E:\NQS\NQStatistics\QstartE.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T04:02:00Z, 2025-08-20T04:02:00Z] |
[f6d90142253043a52879717926747842] |
[a0e1b1f4a0cdfedc917af0a14b818e8762af92fb] |
[1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a] |
[5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e] |
[172.17.253.25] |
[172.17.253.25] |
1 |
Success |
Close Nemo-Q.bat |
E:\NQS\ |
|
335 |
f6d90142253043a52879717926747842 |
|
|
Not Signed |
2025-04-24 14:39:37 +0000 UTC |
2015-05-26 13:24:58 +0000 UTC |
a0e1b1f4a0cdfedc917af0a14b818e8762af92fb |
1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a |
5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e |
2025-08-09 04:02:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dcfbdfdbde9cbef28c79eddee54f0c2accb67f89728b7145fe46d42cce9aa9c5 |
[68a19d39565cc98ae4760187] |
[2] |
[SYSTEM] |
[i-nCtx-SF4] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qedznpgp.ga2.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:13:22Z] |
[] |
[] |
[] |
[] |
[172.17.246.9] |
[172.17.246.9] |
1 |
Success |
__PSScriptPolicyTest_qedznpgp.ga2.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:13:22 +0000 UTC |
2025-08-17 09:13:22 +0000 UTC |
|
|
|
2025-08-17 09:13:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dd57120f1f0e0134e39fc66cab1a7663decce9115a80a252ce9a5793be13137e |
[68a34b98a6132bf659cce5c4, 68a34df0b71eea1289980a29] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Reports.dll] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] |
[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] |
[2025-08-18T15:47:40Z, 2025-08-18T15:58:42Z] |
[5f532decc4fe7a6cc887d3a1f58b0708] |
[7692172ed549773ca24d98e7a532942ddc3fccc5] |
[356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0] |
[25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
RS2Technologies.AccessItUniversal.Reports.dll |
C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ |
|
264192 |
5f532decc4fe7a6cc887d3a1f58b0708 |
Access It! |
10.1.0.7 |
Not Signed |
2023-07-25 16:11:56 +0000 UTC |
2023-07-25 16:11:56 +0000 UTC |
7692172ed549773ca24d98e7a532942ddc3fccc5 |
356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0 |
25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc |
2025-06-09 22:00:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dd6a23c7089b29d9b9af510e2f872b5cc369c931923f5b21c9395923f098d9c1 |
[68a3146b5f0c41860c8c84eb, 68a3146b5f0c41860c8c851f] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z] |
[489c61297357b3b99fc16ea3dc1721ab] |
[5eae896c5218fd0730f2f34757a7d18ea262c3e4] |
[b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40] |
[b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
pywin32_bootstrap.cpython-313.pyc |
C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\ |
|
1024 |
489c61297357b3b99fc16ea3dc1721ab |
|
|
Not Signed |
2024-11-22 16:26:08 +0000 UTC |
2024-11-22 16:26:08 +0000 UTC |
5eae896c5218fd0730f2f34757a7d18ea262c3e4 |
b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40 |
b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ddc733167b0596778d6e16240e331d1bb2883d883e36d7f1dfdc3776581914bb |
[68a3146b5f0c41860c8c84e8, 68a3146b5f0c41860c8c851b] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] |
[0dc440c9e1c9be2baf0810e74c9235fd] |
[deefe130f31490b275806f838ec6646ef01515a3] |
[31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089] |
[0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
utf_8.cpython-313.pyc |
C:\Program Files\Python\Lib\encodings\__pycache__\ |
|
2292 |
0dc440c9e1c9be2baf0810e74c9235fd |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
deefe130f31490b275806f838ec6646ef01515a3 |
31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089 |
0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e33e6856e8edeae2c5890cc751457fb4e4cdc45d8ca536e16f4a16395c52a29c |
[68a5cc2091727380a40e2b0e] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:32Z] |
[3ed2304bef9e68e2fb6a30c735a1859c] |
[16a7c5690e080a97e8c9cd6df223db64b6493010] |
[d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795] |
[9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1 |
C:\_work_devops_mdi\_temp\ |
|
936 |
3ed2304bef9e68e2fb6a30c735a1859c |
|
|
Not Signed |
2025-08-20 13:22:32 +0000 UTC |
2025-08-20 13:22:32 +0000 UTC |
16a7c5690e080a97e8c9cd6df223db64b6493010 |
d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795 |
9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394 |
2025-08-20 13:22:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dea56f31a5b1d22c57115b748b64d8166d83fe01daae5c95607bbb8a6f95e449 |
[68a1b5c50915c3775058adfa] |
[2] |
[SYSTEM] |
[u-nLanSweep1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iouipeum.4l3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:58:08Z] |
[] |
[] |
[] |
[] |
[172.25.17.127] |
[172.25.17.127] |
1 |
Success |
__PSScriptPolicyTest_iouipeum.4l3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:58:08 +0000 UTC |
2025-08-17 10:58:08 +0000 UTC |
|
|
|
2025-08-17 10:58:13 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| df58757712295dbb1f70447f2200ba2ecd8a06dc9ff15290548d1b3b80fb1b83 |
[68a387828e5327740b40aeae] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c02y5bwl.mpb.ps1] |
[Servers] |
[Servers Audit] |
[v2268.865] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T20:05:19Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_c02y5bwl.mpb.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 20:05:19 +0000 UTC |
2025-08-18 20:05:19 +0000 UTC |
|
|
|
2025-08-18 20:05:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dfb45ff554590eb9467d82835099f80d0f504c203845681b55292eaab0883644 |
[68a164c5390404f85b716adb, 68a2b64cfd812c7de4e545b0, 68a408129f3185cbaca3c5cb, 68a559bf118aff08c8ed4944] |
[2] |
[SYSTEM] |
[i-vroggera] |
[NT AUTHORITY] |
[C:\icm\pcce\ra\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z] |
[8cb39e842d0db0518f876501538e460b] |
[77b6e192cbf04a40b6e0e32a73cc770695495f56] |
[afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88] |
[339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600] |
[172.17.196.42] |
[172.17.196.42] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\ra\bin\ |
|
406 |
8cb39e842d0db0518f876501538e460b |
|
|
Not Signed |
2021-10-07 20:04:20 +0000 UTC |
2021-10-07 20:04:20 +0000 UTC |
77b6e192cbf04a40b6e0e32a73cc770695495f56 |
afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88 |
339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| dfb65002256db6ec059ac1994861030cc37096640ef394054187e6e5df234542 |
[68a1b088a503d43204bbb9e4] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sszg4ffh.uu5.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:35:39Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_sszg4ffh.uu5.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:35:39 +0000 UTC |
2025-08-17 10:35:39 +0000 UTC |
|
|
|
2025-08-17 10:35:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e006a3c090e787efe255b9971ccedae2e9c06e45a5651a93bad0264d16e059c5 |
[68a4a6605961c54c81f645ca] |
[2] |
[be10045eu] |
[i-nsdprodmon1] |
[WVUHS] |
[C:\scripts\SSLCertCheck.ps1] |
[Servers] |
[Servers Audit] |
[v2276.868] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-19T16:29:16Z] |
[14ef36866a2842bd51446da8d40d5cde] |
[1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0] |
[0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56] |
[f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1] |
[172.17.252.208] |
[172.17.252.208] |
1 |
Success |
SSLCertCheck.ps1 |
C:\scripts\ |
|
2636 |
14ef36866a2842bd51446da8d40d5cde |
|
|
Not Signed |
2023-08-09 13:18:30 +0000 UTC |
2025-07-21 19:17:19 +0000 UTC |
1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0 |
0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56 |
f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1 |
2025-08-19 16:29:20 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e0b4a5a243fe5848fc77cefd16f94933d35229556186830f24fcf2065eec786a |
[68a17bc07b632e8a862c1429] |
[2] |
[SYSTEM] |
[i-hvhprod12] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xtfzriej.1md.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:50:36Z] |
[] |
[] |
[] |
[] |
[172.17.21.88] |
[172.17.21.88] |
1 |
Success |
__PSScriptPolicyTest_xtfzriej.1md.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:50:36 +0000 UTC |
2025-08-17 06:50:36 +0000 UTC |
|
|
|
2025-08-17 06:50:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e0bec8be6fc453c6af4051e4b801303bea9c328f59b7d7ff40251c10de600125 |
[68a232a8e87ce966b73e852e] |
[2] |
[SYSTEM] |
[i-nctxddc-dev2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eiug2m5n.wwg.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:50:51Z] |
[] |
[] |
[] |
[] |
[172.17.146.24] |
[172.17.146.24] |
1 |
Success |
__PSScriptPolicyTest_eiug2m5n.wwg.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:50:51 +0000 UTC |
2025-08-17 19:50:51 +0000 UTC |
|
|
|
2025-08-17 19:51:04 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e546c1ecd425ed469638ea9c8cd091f861f912c74e5d7afcfee51219c7a3c66f |
[68a15602d61ba01a4f22a4fb, 68a2a78cc07c7d9334c20f46] |
[2] |
[sunrisebackup] |
[CI1BEFS3] |
[WHI] |
[D:\adminscripts\SCMNightlyAdminRebuildOnly.bat] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T04:05:00Z, 2025-08-18T04:05:00Z] |
[c7ee3db23e15ef7844db279f1a285530] |
[1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82] |
[b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066] |
[752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4] |
[172.18.112.86] |
[172.18.112.86] |
1 |
Success |
SCMNightlyAdminRebuildOnly.bat |
D:\adminscripts\ |
|
85 |
c7ee3db23e15ef7844db279f1a285530 |
|
|
Not Signed |
2019-09-17 15:10:50 +0000 UTC |
2015-02-26 19:14:36 +0000 UTC |
1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82 |
b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066 |
752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4 |
2025-08-09 04:05:07 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e575875c544fb1727f9016d19415241e94a0bafc82b05eaabb842c2b8e1bceec |
[68a233fd88f628d5134f0d73] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3o4q5llx.mi5.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:56:33Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_3o4q5llx.mi5.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:56:33 +0000 UTC |
2025-08-17 19:56:33 +0000 UTC |
|
|
|
2025-08-17 19:56:45 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e0c668862894797d5ef235021b63abf727ee5c656d490ee98fecd70afaef483a |
[68a34d6610b57c5bffc57db0] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:29Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e15020453fd5682d980b735a7e1cfd739ff733d258644f24b48093d67b50f36d |
[68a3146b5f0c41860c8c8532, 68a3146b5f0c41860c8c856f] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\_encoded_words.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] |
[862e39ae2a4dad0447fb922787ad011b] |
[059fdab715b03cf4f835efa17f6c2bfad339872c] |
[a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718] |
[4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
_encoded_words.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
8291 |
862e39ae2a4dad0447fb922787ad011b |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
059fdab715b03cf4f835efa17f6c2bfad339872c |
a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718 |
4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e1c8c3702bc0abbf1b5ae61cc29d04c80a8a2bbd8d1fcbf0d11cc86ae6eaf444 |
[68a18e6597a47909aebcd988, 68a2ddd944d60e582ffc0d18, 68a42f7e81de93c2600b6ec4, 68a581188343e5a09486e03d] |
[2] |
[SYSTEM] |
[vm-UHCcbord] |
[NT AUTHORITY] |
[C:\cbordwin\NSI_Restart.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T08:00:12Z, 2025-08-18T08:00:11Z, 2025-08-19T08:00:11Z, 2025-08-20T08:00:11Z] |
[643b85dab211d67f2a377645205e031b] |
[a34d7f6dc0c990ae6dafaf6719be7f835dd6e680] |
[218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0] |
[851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f] |
[172.17.252.44] |
[172.17.252.44] |
1 |
Success |
NSI_Restart.bat |
C:\cbordwin\ |
|
239 |
643b85dab211d67f2a377645205e031b |
|
|
Not Signed |
2021-02-18 16:14:38 +0000 UTC |
2021-02-18 16:14:38 +0000 UTC |
a34d7f6dc0c990ae6dafaf6719be7f835dd6e680 |
218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0 |
851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f |
2025-08-09 08:00:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e1ff597b34a621df3054f1feff304913055fd02bd0d002b5c5f2d01aedf6351a |
[68a2f9ca170585b222da8a8a] |
[2] |
[SYSTEM] |
[i-hccmctracer] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] |
[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] |
[2025-08-18T10:00:28Z] |
[] |
[] |
[] |
[] |
[172.17.252.28] |
[172.17.252.28] |
1 |
Success |
expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3366.16 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 10:00:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e28c7ee6c3458c61330546eddf643de294705d96fb0d6188f19cd83bb07f75e8 |
[68a42a0830e7648dae66944e] |
[2] |
[SYSTEM] |
[uvOSCCN2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iax0wn2e.gzu.ps1] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-19T07:38:39Z] |
[] |
[] |
[] |
[] |
[172.25.18.157] |
[172.25.18.157] |
1 |
Success |
__PSScriptPolicyTest_iax0wn2e.gzu.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-19 07:38:39 +0000 UTC |
2025-08-19 07:38:39 +0000 UTC |
|
|
|
2025-08-19 07:38:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e3155f4c18e0f01cd09af5fcbdfb7f841db769e1df5e24dbd013f688beac7327 |
[68a25fb2e970d941642e7edb, 68a25fb2e970d941642e7ee8, 68a3b2cf09045b56b2a707b3, 68a3b2cf09045b56b2a707c0, 68a502e12ae1a61fbf4caf11, 68a502e12ae1a61fbf4caf1e] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\LumenWorks.Framework.IO.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:05Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:05Z, 2025-08-19T23:00:15Z] |
[5d44925a2cc697a34066331935d1f7f9] |
[a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026] |
[c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d] |
[124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
LumenWorks.Framework.IO.dll |
C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\ |
LumenWorks.Framework.IO |
46080 |
5d44925a2cc697a34066331935d1f7f9 |
LumenWorks.Framework.IO |
4.0.0 e6be48 |
Not Signed |
2024-03-28 18:35:30 +0000 UTC |
2018-03-24 18:18:16 +0000 UTC |
a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026 |
c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d |
124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d |
2025-05-10 23:00:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e7a68bf65d100ee688ccbd5bc3ae56686f7242c452236e20b3694cf8ed799bc8 |
[68a18e00ac9837c6e03c8389, 68a2df7d66d5c17a898e511e, 68a431051f4ef020faf2a7a9, 68a5828bc061ac4c45b0fd35] |
[2] |
[SYSTEM] |
[I-NUHNQENG] |
[NT AUTHORITY] |
[E:\NQS\NQEngine\Engine2000S.exe] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[E:\NQS\NQEngine\Engine2000S.exe] |
[Not Signed] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-17T08:00:01Z, 2025-08-18T08:00:04Z, 2025-08-19T08:00:06Z, 2025-08-20T08:00:08Z] |
[7ffb1ce555b054984ec466e3d928178c] |
[9bbbe25bfedb1c4b4d5c61d441025d0ae882567c] |
[3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8] |
[e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b] |
[172.17.253.25] |
[172.17.253.25] |
1 |
Success |
Engine2000S.exe |
E:\NQS\NQEngine\ |
NQ 2000 |
2737152 |
7ffb1ce555b054984ec466e3d928178c |
|
1.0.0.0 |
Not Signed |
2025-04-24 14:39:41 +0000 UTC |
2016-02-12 20:07:11 +0000 UTC |
9bbbe25bfedb1c4b4d5c61d441025d0ae882567c |
3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8 |
e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b |
2025-07-17 08:00:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e7c553ff1a507979ea54919f4443f196c968882b087280f0e1d45dfe08f84b9f |
[68a3146b5f0c41860c8c8517, 68a3146b5f0c41860c8c856a] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\base64.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] |
[ff71871ad5f9fc74456c58065b29b949] |
[d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd] |
[05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc] |
[2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
base64.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
25797 |
ff71871ad5f9fc74456c58065b29b949 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd |
05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc |
2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e84cb02c1ab3298ff285dcd0295bd943457ba976193591a8f0577f1d2a017b56 |
[68a2529a2a645cc96ea797be] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_woxkkhvu.n5y.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:07:13Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_woxkkhvu.n5y.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:07:13 +0000 UTC |
2025-08-17 22:07:13 +0000 UTC |
|
|
|
2025-08-17 22:07:22 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e8871edd5a81b3ec00c8bd3a62c5151c8b07efe347a250f9962f96c82272052b |
[68a5239e621d09b2b1ed5e54] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PositioningServerInterface.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:36Z] |
[3365edfac602c0aab571c97489df3f5a] |
[f2a108f5b854cdf677b13fdf57d02f0452c8983d] |
[fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af] |
[6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PositioningServerInterface.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
PositioningServerInterface |
295424 |
3365edfac602c0aab571c97489df3f5a |
PositioningServerInterface |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:16 +0000 UTC |
2023-06-15 02:36:16 +0000 UTC |
f2a108f5b854cdf677b13fdf57d02f0452c8983d |
fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af |
6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e3a2d912935cae9b54dfd538ee7eb7135947506037f46e5cd9b0bc84d16147a0 |
[68a195c4355950638b4c627b] |
[2] |
[SYSTEM] |
[i-nLanSweep2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1npvq1ae.jnp.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:41:36Z] |
[] |
[] |
[] |
[] |
[172.17.251.238] |
[172.17.251.238] |
1 |
Success |
__PSScriptPolicyTest_1npvq1ae.jnp.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:41:36 +0000 UTC |
2025-08-17 08:41:36 +0000 UTC |
|
|
|
2025-08-17 08:41:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e3c2629e3abf692e7083da7cf5fd646f4daa808b6c508101eb41967f95b21b79 |
[68a5239e621d09b2b1ed5e4b] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBTagDiagPlugIn.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:34Z] |
[bd3f6d1a4e44a151f39dfbc24eaa84d3] |
[d1b0ba350c91996b8911a34f503200aa28213ff7] |
[c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435] |
[8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PBTagDiagPlugIn.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
PBTagDiagPlugIn |
29184 |
bd3f6d1a4e44a151f39dfbc24eaa84d3 |
PBTagDiagPlugIn |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:06 +0000 UTC |
2023-06-15 02:38:06 +0000 UTC |
d1b0ba350c91996b8911a34f503200aa28213ff7 |
c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435 |
8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e41c25b2cddca5e49140732debc1cecb6d24310050cd2d4751df81d7bff5dd70 |
[68a1a9b1552c0717cd81b68c] |
[2] |
[SYSTEM] |
[i-nctxddc-dev1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aa3qsaw5.zqk.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T10:06:35Z] |
[] |
[] |
[] |
[] |
[172.17.146.23] |
[172.17.146.23] |
1 |
Success |
__PSScriptPolicyTest_aa3qsaw5.zqk.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 10:06:35 +0000 UTC |
2025-08-17 10:06:35 +0000 UTC |
|
|
|
2025-08-17 10:06:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e43742082134ff5d4d915ca172e8590e4514b785ec5e8502628ddd4a56928978 |
[68a17e2d75b9eb54d66b3e31] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\tmpEXO_dh1mrpen.jqt.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:00:50Z] |
[ac7f8b7a05ad9ddcea083c53d571d542] |
[6940392b4e96610355da57e6a1bbefa939d9c4a6] |
[91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537] |
[b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_dh1mrpen.jqt.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\ |
|
2290479 |
ac7f8b7a05ad9ddcea083c53d571d542 |
|
|
Not Signed |
2025-08-17 07:00:48 +0000 UTC |
2025-08-17 07:00:48 +0000 UTC |
6940392b4e96610355da57e6a1bbefa939d9c4a6 |
91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537 |
b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4 |
2025-08-17 07:01:01 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e464c83307f9ee3bccc2f8e58a1a5cf19cff4dd16f52501a21ce7467107113e4 |
[68a311cdc2d0d6e3eb77f20f] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindAccountLockouts.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[853693ccd74c3f9f1604548dd9906f01] |
[ecbf76fe70056921b16d45cadb9a4e09bc8054c7] |
[941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f] |
[3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
FindAccountLockouts.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
6800 |
853693ccd74c3f9f1604548dd9906f01 |
|
|
Not Signed |
2022-01-12 15:17:36 +0000 UTC |
2025-06-25 15:19:58 +0000 UTC |
ecbf76fe70056921b16d45cadb9a4e09bc8054c7 |
941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f |
3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e46e3f2b0c9ed8d7ecbd79530b3054260eb6b284f52d8bf8f2927034c9786d06 |
[68a34d6610b57c5bffc57dac] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:28Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e4a5eaff1f0000536fa3658ecd4cab4da69e1cf7a8a5477fbcbd1c04d12031d2 |
[68a3146b5f0c41860c8c850c, 68a3146b5f0c41860c8c855f] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\html\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] |
[07992cf118f6f4289bfbbd047fd6fb0d] |
[8c8a01f4ffe2e1a05358d1016f61e1fdb432736e] |
[11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036] |
[dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\html\__pycache__\ |
|
4387 |
07992cf118f6f4289bfbbd047fd6fb0d |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
8c8a01f4ffe2e1a05358d1016f61e1fdb432736e |
11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036 |
dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ebb33e93bf4aa5605d294227a8093dc28a5320c6933101c7c95dbdabd8dd1256 |
[68a4709fa6c6568ae291d431] |
[2] |
[my10040sa] |
[i-nkalani25] |
[WVUHS] |
[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\_isuser_0x0409.dll] |
[Servers] |
[Servers Audit] |
[v2272] |
[] |
[Not Signed] |
[C:\software\Storage Manager Data Collector 20.1.2.14.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:39:58Z] |
[fd437e74f172ce8c5f247b12a3e5925a] |
[4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc] |
[fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5] |
[753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae] |
[172.17.23.146] |
[172.17.23.146] |
1 |
Success |
_isuser_0x0409.dll |
C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\ |
|
86016 |
fd437e74f172ce8c5f247b12a3e5925a |
|
|
Not Signed |
2025-08-19 12:39:55 +0000 UTC |
2025-08-19 12:39:55 +0000 UTC |
4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc |
fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5 |
753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae |
2025-08-19 12:39:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ebed11e668287d54fa7671ec27caba844bc77d51026d96ba55b9223b02a274ed |
[68a182e48913a6156189a448] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b10tnrr1.e0s.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:21:03Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_b10tnrr1.e0s.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:21:03 +0000 UTC |
2025-08-17 07:21:03 +0000 UTC |
|
|
|
2025-08-17 07:21:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ec11abdeb642ae755f7c7b4d017e7c78b5da4e2b575c721f71eb4d57f3e7a88d |
[68a469504fb71ee844e91321] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_5a52494c1f07448092c118c8e656989b.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T12:08:41Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_5a52494c1f07448092c118c8e656989b.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 12:08:48 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ec71b467028b6db965ff8ab64c235215c598f54d4a63cad113024dd8fc771dc3 |
[68a3146b5f0c41860c8c853a, 68a3146b5f0c41860c8c8572] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\mimetypes.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[7603dbb91271b3fdb5f1bc8cb3ca1d91] |
[570e0305f2409135f29de45c38bdcdb053c14bf0] |
[1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d] |
[8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
mimetypes.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
24884 |
7603dbb91271b3fdb5f1bc8cb3ca1d91 |
|
|
Not Signed |
2024-11-22 16:23:39 +0000 UTC |
2024-11-22 16:23:39 +0000 UTC |
570e0305f2409135f29de45c38bdcdb053c14bf0 |
1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d |
8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e642ba38c1b80ccb926e5d13c06a8ba9b700308edd6764b20b1d72973f1f7a3b |
[68a3146b5f0c41860c8c8515, 68a3146b5f0c41860c8c8568] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\string.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[566c8c7cc2e8b6a0d8c56c8e9ecbaa3a] |
[0034fdaf7b975f232e54048ebfde010287bb30bb] |
[99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef] |
[de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
string.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
11659 |
566c8c7cc2e8b6a0d8c56c8e9ecbaa3a |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
0034fdaf7b975f232e54048ebfde010287bb30bb |
99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef |
de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e74ce1799cb48cfd0822a610cf41a101f6b996f6246aac0ff28d21902a2df002 |
[68a2a5b5b3e0e8853da851bb] |
[2] |
[SYSTEM] |
[i-nctx-pvs3] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tgxzzgk2.4mz.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T04:01:54Z] |
[] |
[] |
[] |
[] |
[172.17.146.6] |
[172.17.146.6] |
1 |
Success |
__PSScriptPolicyTest_tgxzzgk2.4mz.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-18 04:01:54 +0000 UTC |
2025-08-18 04:01:54 +0000 UTC |
|
|
|
2025-08-18 04:01:57 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ee3cc7db22713da029361eb122a24463f48437a6e404852e50a494ffc1d1de56 |
[68a5239e621d09b2b1ed5e66] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\StatusbarMechanism.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:40Z] |
[1a5715a26857fd5d1e91a011de5b5c8b] |
[5d84c1c6eee8a6c260438cbcc5a1c387e51aa715] |
[c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87] |
[c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
StatusbarMechanism.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
9728 |
1a5715a26857fd5d1e91a011de5b5c8b |
|
1.0.8565.40737 |
Not Signed |
2023-06-15 02:37:56 +0000 UTC |
2023-06-15 02:37:56 +0000 UTC |
5d84c1c6eee8a6c260438cbcc5a1c387e51aa715 |
c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87 |
c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ee4054fd2936ad6c0c3eec4328e9018272e8e3790e2c6ad97ef88cd7982f06ce |
[68a311cdc2d0d6e3eb77f211] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GetForestDCInfo.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[f365fc9dfa1de8d074ba768da6120a73] |
[82ec0308883dd686ab4009e644bf5cc0b1710f80] |
[3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e] |
[b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
GetForestDCInfo.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
4362 |
f365fc9dfa1de8d074ba768da6120a73 |
|
|
Not Signed |
2021-11-18 18:17:21 +0000 UTC |
2025-03-06 21:51:56 +0000 UTC |
82ec0308883dd686ab4009e644bf5cc0b1710f80 |
3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e |
b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| efdd8526ee90a02300ee6859ff21d3c192df2760b14c92d78e3f40657602b7f0 |
[68a5239e621d09b2b1ed5e4a] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBDeviceDiagPlugIn.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:33Z] |
[fccd46d7671843dc7a4835197d775094] |
[ece368dcb0767f9917a8d3afc0ed9082d6700894] |
[f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1] |
[b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
PBDeviceDiagPlugIn.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
PBDeviceDiagPlugIn |
27648 |
fccd46d7671843dc7a4835197d775094 |
PBDeviceDiagPlugIn |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:04 +0000 UTC |
2023-06-15 02:38:04 +0000 UTC |
ece368dcb0767f9917a8d3afc0ed9082d6700894 |
f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1 |
b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| e9fcae336dc75d1cb657622eeaa2ab81083a02b7daedf904f8ba15267c64c8d3 |
[68a1dc843e3eb3bfafb56906] |
[2] |
[SYSTEM] |
[u-nOSCCAPP2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr4qf3zl.d0p.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:43:24Z] |
[] |
[] |
[] |
[] |
[172.25.17.231] |
[172.25.17.231] |
1 |
Success |
__PSScriptPolicyTest_tr4qf3zl.d0p.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:43:24 +0000 UTC |
2025-08-17 13:43:24 +0000 UTC |
|
|
|
2025-08-17 13:43:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ea8ebc2434881a8707d0b7745bb45b216a93fc17cb44f7989e884986d3042ed4 |
[68a26d9b01bfd350e1216692] |
[2] |
[SYSTEM] |
[UH-APPS] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_plvpuyxw.2rp.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T00:02:27Z] |
[e27a0a2d3577c6ec112ce253a21fd3da] |
[3045a8bf5fe3e3e2ca9307923d50e98829725c76] |
[c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9] |
[c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1] |
[172.17.253.46] |
[172.17.253.46] |
1 |
Success |
__PSScriptPolicyTest_plvpuyxw.2rp.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
e27a0a2d3577c6ec112ce253a21fd3da |
|
|
Not Signed |
2025-08-18 00:02:27 +0000 UTC |
2025-08-18 00:02:27 +0000 UTC |
3045a8bf5fe3e3e2ca9307923d50e98829725c76 |
c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9 |
c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1 |
2025-08-18 00:02:35 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f0d4b9c238d24b510f54549e58b65ca771cec784837dcce1afed90b9fa76aeb0 |
[68a311cdc2d0d6e3eb77f205] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\UScripts\RestoreMailboxToOtherMailbox-U.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[1aceb94194ecbedc4297e2942461bb42] |
[fff9c984488a363dede782841598d4a7d6ea65c9] |
[cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7] |
[f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
RestoreMailboxToOtherMailbox-U.ps1 |
C:\Users\georgemag\Documents\MAG\UScripts\ |
|
25506 |
1aceb94194ecbedc4297e2942461bb42 |
|
|
Not Signed |
2025-02-28 16:55:32 +0000 UTC |
2025-07-02 12:22:49 +0000 UTC |
fff9c984488a363dede782841598d4a7d6ea65c9 |
cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7 |
f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f143981b39642060db0d79ca61d54d93831de9f62af0b4958067fecf1e483a55 |
[68a156984663bd83db8ebc96] |
[2] |
[SYSTEM] |
[WHL-STOREFRONT1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wse2sex4.g1x.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T04:12:01Z] |
[] |
[] |
[] |
[] |
[172.18.112.145] |
[172.18.112.145] |
1 |
Success |
__PSScriptPolicyTest_wse2sex4.g1x.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
81 |
|
|
|
Not Signed |
2025-08-17 04:12:01 +0000 UTC |
2025-08-17 04:12:01 +0000 UTC |
|
|
|
2025-08-17 04:12:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f22fa52b2c27e95cd2a6cac5cfa0f131563e6a977b30d71196f1162fe4a5688b |
[68a330781adb06bf567189ac] |
[2] |
[be10045] |
[i-nsdprint1] |
[WVUHS] |
[D:\scripts\WorkdaySearch.ps1] |
[Servers] |
[Servers Audit] |
[v2255.853] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T13:53:53Z] |
[f9d67ab54445d23d6c36da84993679bc] |
[dbf31330f49f312513c003971506ed9206865011] |
[62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7] |
[bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e] |
[172.17.252.10] |
[172.17.252.10] |
1 |
Success |
WorkdaySearch.ps1 |
D:\scripts\ |
|
2202 |
f9d67ab54445d23d6c36da84993679bc |
|
|
Not Signed |
2023-10-30 13:43:35 +0000 UTC |
2025-08-18 13:53:45 +0000 UTC |
dbf31330f49f312513c003971506ed9206865011 |
62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7 |
bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e |
2025-08-18 13:54:00 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f2782880edc138832f75cd69dc0c6828c60da4a688c8890c5b0ffc48923ee4e5 |
[68a5239e621d09b2b1ed5e64] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Jms.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:39Z] |
[a9718f9d3fe1e994d65410cbb3247fe7] |
[07de5a6d30f9c398bdd133d45d866ab31b110436] |
[4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c] |
[d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Stanley.PeCommServices.Jms.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
Stanley.PeCommServices.Jms |
12800 |
a9718f9d3fe1e994d65410cbb3247fe7 |
Stanley.PeCommServices.Jms |
1.0.0.0 |
Not Signed |
2023-06-15 02:36:24 +0000 UTC |
2023-06-15 02:36:24 +0000 UTC |
07de5a6d30f9c398bdd133d45d866ab31b110436 |
4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c |
d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6 |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed40ecd60e4ade1ed57b3949d0beb19565a6fbc9e9238e7d60ae5de0e431abea |
[68a311cdc2d0d6e3eb77f20d] |
[2] |
[georgemag] |
[U-CAJump] |
[WVUHS] |
[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\LastReboot.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T11:38:48Z] |
[fd0d3b6d86dba9dcf7ae484c4f0ee02e] |
[a5c9075875cc116e1c0251652af618da238c7fe4] |
[ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc] |
[aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
LastReboot.ps1 |
C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ |
|
3398 |
fd0d3b6d86dba9dcf7ae484c4f0ee02e |
|
|
Not Signed |
2022-05-10 13:26:50 +0000 UTC |
2024-12-05 19:56:50 +0000 UTC |
a5c9075875cc116e1c0251652af618da238c7fe4 |
ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc |
aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9 |
2025-08-12 11:48:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed550633d5d9cca7b426dac56666ec9a076a0fd328a3578465617c705b9b7abf |
[68a55bd959b5c4211a08ec3b] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mc0sxuun.dbv.ps1] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T05:23:31Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_mc0sxuun.dbv.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-20 05:23:31 +0000 UTC |
2025-08-20 05:23:31 +0000 UTC |
|
|
|
2025-08-20 05:23:37 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed6a94369257cf5aeacc1717ba2325547c74f196b10586c90d35e25dbe1032a1 |
[68a523949cec397f02de9f5d] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GUIUtils.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:30Z] |
[e69064234c54b30c82038104ca321e12] |
[1a8fe23753edb0a3136a87dc35a492fef353f2ca] |
[96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69] |
[38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
GUIUtils.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
69632 |
e69064234c54b30c82038104ca321e12 |
|
1.0.8565.40691 |
Not Signed |
2023-06-15 02:36:24 +0000 UTC |
2023-06-15 02:36:24 +0000 UTC |
1a8fe23753edb0a3136a87dc35a492fef353f2ca |
96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69 |
38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed728dd8ff1738114e51955b8a8e18e26bfd61f721db5aae1bd2639d01035b5c |
[68a1642ad1ecd8b85d19b5b0, 68a2b3a6e6ca2bd5ba2a7ac0, 68a4054c9ee88c99993abccd, 68a556e8217e3b11fe5ae34c] |
[2] |
[SYSTEM] |
[vm-UHCcbord] |
[NT AUTHORITY] |
[C:\cbordwin\RestartDataService.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:00:01Z, 2025-08-18T05:00:02Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:01Z] |
[84ca3a5b98517c455870e62ca343e1a8] |
[3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8] |
[e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549] |
[67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf] |
[172.17.252.44] |
[172.17.252.44] |
1 |
Success |
RestartDataService.bat |
C:\cbordwin\ |
|
1168 |
84ca3a5b98517c455870e62ca343e1a8 |
|
|
Not Signed |
2018-08-07 19:53:41 +0000 UTC |
2018-08-07 19:55:10 +0000 UTC |
3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8 |
e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549 |
67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf |
2025-08-09 05:00:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed7f0c624fbdcf4020d4e80f6baf68134ed79f0fc414c9c57c225247b62bc875 |
[68a5d47cc6760b09dc6a843f, 68a5d5c523f474b5ba76fd33] |
[2] |
[CA_Jnt_SVA12] |
[I-CA-PSM] |
[WVUHS] |
[C:\MDE2016\install.ps1] |
[Servers] |
[Servers Audit] |
[v2293.885] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T13:58:13Z, 2025-08-20T14:01:29Z] |
[15d5a2e4c9399180703644f6cec95845] |
[ef5ac362659dfeacbfd6c52814339a25e653b7bc] |
[f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a] |
[b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947] |
[172.17.252.63] |
[172.17.252.63] |
1 |
Success |
install.ps1 |
C:\MDE2016\ |
|
99053 |
15d5a2e4c9399180703644f6cec95845 |
|
|
Not Signed |
2025-07-15 17:19:00 +0000 UTC |
2025-01-28 14:53:54 +0000 UTC |
ef5ac362659dfeacbfd6c52814339a25e653b7bc |
f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a |
b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947 |
2025-07-15 17:19:21 +0000 UTC |
[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ed8404ca8de2d42007eb59ba5c0404491b6eb7daeefeda349d13935753b126d8 |
[68a1d19347b05a9454215684, 68a322aceb4930c1ec69c2bb, 68a4746a6d77d97c70e006c6, 68a5c3cdc942eaeb78c702a0] |
[2] |
[jessie.pennington] |
[PCH-DR001] |
[PCH-DOMAIN] |
[D:\HRG\HrgRun.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2251.851, v2272.867, v2287.879] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T12:43:21Z, 2025-08-18T12:43:21Z, 2025-08-19T12:43:21Z, 2025-08-20T12:43:21Z] |
[7fcaa24a7148c75338c0bacced15af5b] |
[30c8b042cf900a9cf906b1c755d5d1d25b32cacf] |
[4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff] |
[cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335] |
[10.20.22.43] |
[10.20.22.43] |
1 |
Success |
HrgRun.bat |
D:\HRG\ |
|
1416 |
7fcaa24a7148c75338c0bacced15af5b |
|
|
Not Signed |
2023-05-22 14:08:08 +0000 UTC |
2023-09-19 12:47:54 +0000 UTC |
30c8b042cf900a9cf906b1c755d5d1d25b32cacf |
4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff |
cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335 |
2025-08-09 12:46:51 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f4d78ec3aacc15e34bbcacd91f643ed1824f2dc7bd50ab1002f2e01e95456a4d |
[68a17e9d450b6af860b2a048, 68a2d02202d2333d8d83417e, 68a421c7cf2d938484290f3b, 68a5735c4174cee301f60528] |
[2] |
[svc_Iatric] |
[i-nSamDB1] |
[WVUHS] |
[G:\SAMImports\Provation\ExtractYesterday.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z] |
[e2132d40c92ea49fc2ba6f5a48a4e5e1] |
[9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db] |
[b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56] |
[3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213] |
[172.17.21.136] |
[172.17.21.136] |
1 |
Success |
ExtractYesterday.bat |
G:\SAMImports\Provation\ |
|
128 |
e2132d40c92ea49fc2ba6f5a48a4e5e1 |
|
|
Not Signed |
2023-03-06 16:35:20 +0000 UTC |
2023-12-13 12:57:26 +0000 UTC |
9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db |
b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56 |
3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213 |
2025-08-09 07:00:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f529e182b51d5b8921bc0134e5e6fab317321babe9fb10ba92da457f46c53793 |
[68a5239e621d09b2b1ed5e45] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Module.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:32Z] |
[dc2407a1a6409b2c68fb0cb6e69ec180] |
[40155aeb60dffe49e6461c76fa66dc89b8ea9437] |
[e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73] |
[495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
Module.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
|
126976 |
dc2407a1a6409b2c68fb0cb6e69ec180 |
|
1.0.8565.40727 |
Not Signed |
2023-06-15 02:37:36 +0000 UTC |
2023-06-15 02:37:36 +0000 UTC |
40155aeb60dffe49e6461c76fa66dc89b8ea9437 |
e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73 |
495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc |
2025-08-20 01:23:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f530fa19af4b883e5fa5cded7db4d38f87828b68adda565f42a9f47dcb237d0e |
[68a2b38b161afab772184bd4] |
[2] |
[CA_Jnt_ExchAuto] |
[U-CAJump] |
[WVUHS] |
[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\tmpEXO_iibpe4mm.2kz.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T05:00:48Z] |
[beb8c90fe57930da08c3e3ceeeefca0d] |
[c983a10d79f3df73d3413c98e661499bb2163e0b] |
[fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb] |
[be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b] |
[172.25.17.86] |
[172.25.17.86] |
1 |
Success |
tmpEXO_iibpe4mm.2kz.psm1 |
C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\ |
|
2290479 |
beb8c90fe57930da08c3e3ceeeefca0d |
|
|
Not Signed |
2025-08-18 05:00:47 +0000 UTC |
2025-08-18 05:00:47 +0000 UTC |
c983a10d79f3df73d3413c98e661499bb2163e0b |
fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb |
be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b |
2025-08-18 05:00:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f5730988fcea216c2807c08c31f0f047cd77bfa91f500368883ab178cea72b05 |
[68a1dee6de61d9c2d3f810de] |
[2] |
[SYSTEM] |
[u-nOSCCAPP2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_404hqnm2.awk.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T13:53:30Z] |
[] |
[] |
[] |
[] |
[172.25.17.231] |
[172.25.17.231] |
1 |
Success |
__PSScriptPolicyTest_404hqnm2.awk.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 13:53:30 +0000 UTC |
2025-08-17 13:53:30 +0000 UTC |
|
|
|
2025-08-17 13:53:42 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f5db951701b43d9e065c4d5548acbf9b2e8dc765caaccf137d33c2df17e42915 |
[68a31a5c2c2fd909a9789515] |
[2] |
[SYSTEM] |
[i-nCtx-SF2] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yot1w4e0.sl3.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-18T12:19:33Z] |
[] |
[] |
[] |
[] |
[172.17.146.10] |
[172.17.146.10] |
1 |
Success |
__PSScriptPolicyTest_yot1w4e0.sl3.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-18 12:19:33 +0000 UTC |
2025-08-18 12:19:33 +0000 UTC |
|
|
|
2025-08-18 12:19:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f6136e0ffb0c22bc0011234c50eaa14f7b30b94b0fc3607b11b566a0d1886d61 |
[68a26ea46e6b6ee6bc972e27, 68a3c03623c2934753962dcb, 68a511ca8c3c7fce901b5863] |
[2] |
[SYSTEM] |
[i-nGRNTBaxterDB] |
[NT AUTHORITY] |
[F:\app\oracle\fast_recovery_area\CEDB0601\rman_backup.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T00:00:01Z, 2025-08-19T00:00:01Z, 2025-08-20T00:00:01Z] |
[608b8e09fac55079d60755d6fdbe776f] |
[611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd] |
[fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8] |
[5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c] |
[172.17.20.124] |
[172.17.20.124] |
1 |
Success |
rman_backup.bat |
F:\app\oracle\fast_recovery_area\CEDB0601\ |
|
141 |
608b8e09fac55079d60755d6fdbe776f |
|
|
Not Signed |
2025-05-07 13:44:13 +0000 UTC |
2025-05-07 13:45:30 +0000 UTC |
611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd |
fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8 |
5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c |
2025-08-09 00:00:08 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f6a6c9f6b882d5870f8663518d1227f52605393e27eedf1dfbd79b2a5f4d8859 |
[68a3146b5f0c41860c8c8552, 68a3146b5f0c41860c8c8578] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\__pycache__\tokenize.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] |
[d4f62a3f3588da7cf8adaae6570edf2b] |
[ebda299175433b27ac007f69f74952d20ae5202b] |
[4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5] |
[7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
tokenize.cpython-313.pyc |
C:\Program Files\Python\Lib\__pycache__\ |
|
24812 |
d4f62a3f3588da7cf8adaae6570edf2b |
|
|
Not Signed |
2024-11-22 16:23:37 +0000 UTC |
2024-11-22 16:23:37 +0000 UTC |
ebda299175433b27ac007f69f74952d20ae5202b |
4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5 |
7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f6b501b9214e63a29c2c4568350f7b6b145946c144d9b014300fbcc0784f7c60 |
[68a5f159551ff431c0c2f46a] |
[2] |
[CA_Jnt_FormFast2] |
[i-NTFFWEB1] |
[WVUHS] |
[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_b2yelpqr.qj0.ps1] |
[Servers] |
[Servers Audit] |
[v2306.895] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T16:01:26Z] |
[] |
[] |
[] |
[] |
[172.17.253.163] |
[172.17.253.163] |
1 |
Success |
__PSScriptPolicyTest_b2yelpqr.qj0.ps1 |
C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ |
|
81 |
|
|
|
Not Signed |
2025-08-20 16:01:26 +0000 UTC |
2025-08-20 16:01:26 +0000 UTC |
|
|
|
2025-08-20 16:01:29 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| eff71ebfb31f1822e569edc81990a969cf42a402a6a6f42cf4d1227e6ea0d1a7 |
[68a23457310f884f1ff6772d] |
[2] |
[SYSTEM] |
[i-hPRNRemisol] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rgmk0of0.40c.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:58:05Z] |
[] |
[] |
[] |
[] |
[172.17.23.88] |
[172.17.23.88] |
1 |
Success |
__PSScriptPolicyTest_rgmk0of0.40c.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:58:05 +0000 UTC |
2025-08-17 19:58:05 +0000 UTC |
|
|
|
2025-08-17 19:58:15 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f057202970b8bf95c8a587bd6c4e319eb753010daaeea4944e1ec5e269b3e120 |
[68a4dda823653165b0c6ea27] |
[2] |
[CA_Jnt_DAWS3] |
[i-hMSFT-ODA] |
[WVUHS] |
[C:\Assessments\ADSecurityAssessment\run.cmd] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T20:20:40Z] |
[8bd1e8d9b600a129656078512f623ff0] |
[5745c02ec0e1eae0b43b16753beb8e1ccb8081a6] |
[14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c] |
[c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094] |
[172.17.23.172] |
[172.17.23.172] |
1 |
Success |
run.cmd |
C:\Assessments\ADSecurityAssessment\ |
|
215 |
8bd1e8d9b600a129656078512f623ff0 |
|
|
Not Signed |
2024-10-29 19:20:40 +0000 UTC |
2024-10-29 19:20:40 +0000 UTC |
5745c02ec0e1eae0b43b16753beb8e1ccb8081a6 |
14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c |
c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094 |
2025-08-12 20:20:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f0901d66025505ba75703951e37a08b7079d7077fb98a506057fe8fc141e06ef |
[68a242b8fcb6ba0be2122339] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_kiw23hmo.z5k.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T20:59:23Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_kiw23hmo.z5k.ps1 |
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 20:59:23 +0000 UTC |
2025-08-17 20:59:23 +0000 UTC |
|
|
|
2025-08-17 20:59:36 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f0d097448b58a879149fea8c0fd5bfd34b72db3a858fb2f371e8438dbb8717c7 |
[68a233e95f55f21b103cd9c5] |
[2] |
[SYSTEM] |
[i-nCTX-SessRec] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vvd1ao.f0e.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T19:56:13Z] |
[] |
[] |
[] |
[] |
[172.17.146.20] |
[172.17.146.20] |
1 |
Success |
__PSScriptPolicyTest_h3vvd1ao.f0e.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 19:56:13 +0000 UTC |
2025-08-17 19:56:13 +0000 UTC |
|
|
|
2025-08-17 19:56:25 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fbdd4672faf5ce1f6d58b336dd2cba9cab2624ea92c91371f8ca26c47c06adc4 |
[68a1933a637eb74a714c329b] |
[2] |
[SYSTEM] |
[WHL-STOREFRONT1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ic5gp5jg.stn.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T08:30:43Z] |
[] |
[] |
[] |
[] |
[172.18.112.145] |
[172.18.112.145] |
1 |
Success |
__PSScriptPolicyTest_ic5gp5jg.stn.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 08:30:43 +0000 UTC |
2025-08-17 08:30:43 +0000 UTC |
|
|
|
2025-08-17 08:30:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fc110f30f53ee8362931a98ed1af4c37dadcf79a8dc5f09b4070eaa4a758698d |
[68a523949cec397f02de9f59] |
[2] |
[SYSTEM] |
[i-nMobileView] |
[NT AUTHORITY] |
[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GenConfigDiagPlugIn.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\CompatTelRunner.exe] |
[C:\Windows\System32\CompatTelRunner.exe] |
[2025-08-20T01:23:30Z] |
[a4540f55360e91330d7228e9b59bc092] |
[5500674149e61c84977326de17b4029f1ee8f286] |
[e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197] |
[4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1] |
[172.17.22.40] |
[172.17.22.40] |
1 |
Success |
GenConfigDiagPlugIn.dll |
C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ |
GenConfigDiagPlugIn |
22016 |
a4540f55360e91330d7228e9b59bc092 |
GenConfigDiagPlugIn |
1.0.0.0 |
Not Signed |
2023-06-15 02:38:02 +0000 UTC |
2023-06-15 02:38:02 +0000 UTC |
5500674149e61c84977326de17b4029f1ee8f286 |
e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197 |
4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1 |
2025-08-20 01:23:32 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fc331eb357b655d600c2d206e7ecfc70febb0f298b81a190f1c7444258d15d48 |
[68a34d6610b57c5bffc57dad] |
[2] |
[CA_Jnt_SVAsp] |
[i-hadfs-1] |
[WVUHS] |
[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1] |
[Servers] |
[Servers Audit] |
[v2258.855] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-18T15:55:28Z] |
[] |
[] |
[] |
[] |
[172.17.253.100] |
[172.17.253.100] |
1 |
Success |
AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1 |
C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-11 14:07:50 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fc4523c52329ec0e4c6c37175aa7dce0ce9ca97709430cda952ebc5c33f45af7 |
[68a177ff5edefd4d66a3be1f] |
[2] |
[SYSTEM] |
[U-CBPRO] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bkndjlvo.aen.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T06:34:29Z] |
[] |
[] |
[] |
[] |
[172.25.17.173] |
[172.25.17.173] |
1 |
Success |
__PSScriptPolicyTest_bkndjlvo.aen.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 06:34:29 +0000 UTC |
2025-08-17 06:34:29 +0000 UTC |
|
|
|
2025-08-17 06:34:39 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f86bbdcf20149796065c2615ecfff56ddd1aaa311e74d7952014b8d81dc3bc7b |
[68a5bdfb54e99efcaf1f8db9] |
[2] |
[georgemag] |
[I-CAJump] |
[WVUHS] |
[C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\vkgsr1ui.dll] |
[Servers] |
[Servers Audit] |
[v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:22:14Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
vkgsr1ui.dll |
C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-20 12:22:19 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f8d7b2befffa01c23b301f5168c7e7e2282997099904057bfc6cac0ffaf53265 |
[68a17e555329b4ad00f14830] |
[2] |
[SYSTEM] |
[GMH-CTX-APP1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ynbbntyr.zmr.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T07:01:31Z] |
[] |
[] |
[] |
[] |
[172.31.241.7] |
[172.31.241.7] |
1 |
Success |
__PSScriptPolicyTest_ynbbntyr.zmr.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 07:01:31 +0000 UTC |
2025-08-17 07:01:31 +0000 UTC |
|
|
|
2025-08-17 07:01:41 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f9a0f6cdf5c1aa62deaffa6fbffbb56bf484a879e88f5d7f775bcadbb2a0c34e |
[68a1a4c40fc81084514a3a34] |
[2] |
[SYSTEM] |
[U-nCTX-SF1] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ie2wsj0b.m1p.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T09:45:38Z] |
[] |
[] |
[] |
[] |
[172.25.246.19] |
[172.25.246.19] |
1 |
Success |
__PSScriptPolicyTest_ie2wsj0b.m1p.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 09:45:38 +0000 UTC |
2025-08-17 09:45:38 +0000 UTC |
|
|
|
2025-08-17 09:45:40 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f9c13d4ce6cf1962eb8e3cb201bb974b32f0db3a1806b0c6352a0a12e7877d30 |
[68a3f034978467a3921f39ac] |
[2] |
[SYSTEM] |
[i-nimmulink] |
[NT AUTHORITY] |
[C:\Windows\SystemTemp\expression_host_be420adaea8f45e69ad3e341273a38ab.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T03:31:59Z] |
[] |
[] |
[] |
[] |
[172.17.253.89] |
[172.17.253.89] |
1 |
Success |
expression_host_be420adaea8f45e69ad3e341273a38ab.dll |
C:\Windows\SystemTemp\ |
|
0 |
|
|
12.2.3452.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-19 03:32:04 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fb65774774f37bf9b61dfd39c7fc27ec58ecedc6cc2d6c9bedee2b6054b0711f |
[68a36b076a7f8fce5714f796] |
[2] |
[my10040sa] |
[i-hventana] |
[WVUHS] |
[D:\InterSystems\HSFoundation\bin\Ccontrol.exe] |
[Servers] |
[Servers Audit] |
[v2264.862] |
["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CCONTROL.EXE" cterminal HSFOUNDATION2017] |
[Not Signed] |
[D:\InterSystems\HSFoundation\bin\csystray.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T18:03:45Z] |
[becf6336d139fb201df8f0c25344fa85] |
[83aaab5f7fe72010d6f1b45366fad34568ea330d] |
[8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f] |
[66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634] |
[172.17.253.63] |
[172.17.253.63] |
1 |
Success |
Ccontrol.exe |
D:\InterSystems\HSFoundation\bin\ |
Cache' Control Program |
25600 |
becf6336d139fb201df8f0c25344fa85 |
Cache' |
2017.2.2.865.3.19109 |
Not Signed |
2019-07-16 21:09:26 +0000 UTC |
2019-07-16 21:09:26 +0000 UTC |
83aaab5f7fe72010d6f1b45366fad34568ea330d |
8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f |
66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634 |
2025-08-12 13:26:31 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| ff28639f74d693212ee201bb3eb552ea3aa6e485d828399380883531b6915fad |
[68a3146b5f0c41860c8c8514, 68a3146b5f0c41860c8c8567] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\quoprimime.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] |
[e8fe369f2c3111f2db22b808a1388e10] |
[01bff92af9b094657904ccf3844f4017b6dd0883] |
[070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe] |
[178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
quoprimime.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
9911 |
e8fe369f2c3111f2db22b808a1388e10 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
01bff92af9b094657904ccf3844f4017b6dd0883 |
070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe |
178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 00d51b889a3889f2b5a293eba542001db0bb43f7728f60a860265a7d9b81f0d5 |
[68a3146b5f0c41860c8c8520, 68a3146b5f0c41860c8c856c] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\email\__pycache__\encoders.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] |
[629e2a9c50daf9538c8417fc8dcf7c14] |
[f298e5565bd87637c224fad6b00e79e7376caed6] |
[f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b] |
[e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
encoders.cpython-313.pyc |
C:\Program Files\Python\Lib\email\__pycache__\ |
|
2061 |
629e2a9c50daf9538c8417fc8dcf7c14 |
|
|
Not Signed |
2024-11-22 16:23:38 +0000 UTC |
2024-11-22 16:23:38 +0000 UTC |
f298e5565bd87637c224fad6b00e79e7376caed6 |
f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b |
e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f6f2c2ee898da74b0dae817a69b5674e23eea37d19051be446e361736afbc9b6 |
[68a5cc349d52e7a8b7af63d6] |
[2] |
[SYSTEM] |
[VM-TalisWave] |
[NT AUTHORITY] |
[C:\_work_devops_mdi\_temp\77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-20T13:22:50Z] |
[2b188a65d88d897daf549bee406d1735] |
[e24730bac7f5091db0bf3b218b2d38ee31e53464] |
[8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d] |
[548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61] |
[172.17.252.194] |
[172.17.252.194] |
1 |
Success |
77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1 |
C:\_work_devops_mdi\_temp\ |
|
374 |
2b188a65d88d897daf549bee406d1735 |
|
|
Not Signed |
2025-08-20 13:22:50 +0000 UTC |
2025-08-20 13:22:50 +0000 UTC |
e24730bac7f5091db0bf3b218b2d38ee31e53464 |
8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d |
548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61 |
2025-08-20 13:23:00 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f75b13c1a5390c281129aec20b64eda82ecdebfccf050514ad487a5979c44eea |
[68a3b085a65533c1207e5253] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\s4wkumbz.dll] |
[Servers] |
[Servers Audit] |
[v2272.867] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-18T23:00:15Z] |
[] |
[] |
[] |
[] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
s4wkumbz.dll |
C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ |
|
0 |
|
|
0.0.0.0 |
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-18 23:00:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f838f549fd861f3358e3264cad8927bdb217d2cc84945325a8f4952f516023b7 |
[68a3146b5f0c41860c8c8502, 68a3146b5f0c41860c8c8526] |
[2] |
[SYSTEM] |
[i-nSASva] |
[NT AUTHORITY] |
[C:\Program Files\Python\Lib\re\__pycache__\__init__.cpython-313.pyc] |
[Servers] |
[Servers Audit] |
[v2248] |
[] |
[Not Signed] |
[C:\Program Files\Python\python.exe] |
[C:\Program Files\Python\python.exe] |
[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] |
[abb6e699fbac4a89b4b96a0923590806] |
[3f0314f1612edc949568cb9863516b712df68f2f] |
[546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968] |
[846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25] |
[172.17.252.131] |
[172.17.252.131] |
1 |
Success |
__init__.cpython-313.pyc |
C:\Program Files\Python\Lib\re\__pycache__\ |
|
19374 |
abb6e699fbac4a89b4b96a0923590806 |
|
|
Not Signed |
2024-11-22 16:23:36 +0000 UTC |
2024-11-22 16:23:36 +0000 UTC |
3f0314f1612edc949568cb9863516b712df68f2f |
546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968 |
846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25 |
2025-08-09 05:02:59 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0193bed6287dff0234554d9d0b50949e96abf8acaca8a301f02332a7349276cf |
[68a164af314711b37247c0a1, 68a2b633bc43c5800255e65e, 68a408552c9c833f6d66b3fb, 68a559867a66111383e972e3] |
[2] |
[SYSTEM] |
[i-vpg1a] |
[NT AUTHORITY] |
[C:\icm\pcce\PG2A\bin\purgeold.bat] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\cmd.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z] |
[592b171e23708bb8d19631cab6bd3ea6] |
[256cda95b6960107ebebdb31310acd3adee827b1] |
[a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae] |
[f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3] |
[172.17.196.43] |
[172.17.196.43] |
1 |
Success |
purgeold.bat |
C:\icm\pcce\PG2A\bin\ |
|
410 |
592b171e23708bb8d19631cab6bd3ea6 |
|
|
Not Signed |
2021-10-07 20:04:38 +0000 UTC |
2021-10-07 20:04:38 +0000 UTC |
256cda95b6960107ebebdb31310acd3adee827b1 |
a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae |
f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3 |
2025-08-09 05:05:09 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0240c288a723d59ab3c098c2479928dad48ac1f5ba1bb5180056ef7d24c84c68 |
[68a17c189d49ad1bd9c4b8c9, 68a2cfae9ae51e4be825c7e4, 68a41f348cf879e8d23db674, 68a572add36d57a95b891e68] |
[2] |
[WVUHPAN] |
[U-NPANHS] |
[HS] |
[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\cmd.exe] |
[2025-08-17T06:51:02Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z] |
[1d1e0f45227d3a637e81d25a2a508187] |
[61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a] |
[27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776] |
[7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f] |
[172.25.17.205] |
[172.25.17.205] |
1 |
Success |
no-ie.ps1 |
C:\Program Files\Quest Software\Management Shell for AD\ |
|
1456 |
1d1e0f45227d3a637e81d25a2a508187 |
|
|
Not Signed |
2022-05-16 20:03:59 +0000 UTC |
2022-05-17 19:04:29 +0000 UTC |
61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a |
27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776 |
7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f |
2025-08-09 06:51:12 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0241e737daa4255049e24dc3271c297bd1bde6963d7c3f990ec60ecdb59b616f |
[68a25a433ab41f2de26688e3] |
[2] |
[SYSTEM] |
[U-NCTXEHH-001] |
[NT AUTHORITY] |
[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tquqr5iv.tb1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[2025-08-17T22:39:58Z] |
[] |
[] |
[] |
[] |
[172.25.10.14] |
[172.25.10.14] |
1 |
Success |
__PSScriptPolicyTest_tquqr5iv.tb1.ps1 |
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ |
|
80 |
|
|
|
Not Signed |
2025-08-17 22:39:58 +0000 UTC |
2025-08-17 22:39:58 +0000 UTC |
|
|
|
2025-08-17 22:40:03 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 029979e088bcb493e4582579eac4ec99faa48c615fe5ab74737fa8746b820228 |
[68a31fecb457e7ec963d10ec] |
[2] |
[GreyBeard] |
[I-CAJump] |
[WVUHS] |
[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849] |
[] |
[Not Signed] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T12:42:24Z] |
[] |
[] |
[] |
[] |
[172.17.252.110] |
[172.17.252.110] |
1 |
Success |
AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1 |
C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ |
|
0 |
|
|
|
Not Signed |
1970-01-01 00:00:00 +0000 UTC |
1970-01-01 00:00:00 +0000 UTC |
|
|
|
2025-08-13 14:15:46 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |