| 670ddf1e8c8d970ff2d18e82ac1ebb0f9838d2d0af4359428bc630bd21a85ee2 |
[68a31e9eca7b7527f86c6ca9, 68a325d712844ae893875a09, 68a5ffc9536a7a985c76561d, 68a605e24d31d8fb8241a71c] |
[2] |
[SYSTEM] |
[i-nCCMCPyxCCEP, i-nCCMCPyxCCET] |
[NT AUTHORITY] |
[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\cp.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2253.852, v2307.897] |
[] |
[BeyondTrust Corporation] |
[C:\Windows\System32\LogonUI.exe] |
[C:\Windows\System32\winlogon.exe] |
[2025-08-18T12:37:48Z, 2025-08-18T13:02:33Z, 2025-08-20T16:53:05Z, 2025-08-20T17:27:13Z] |
[672aff5f06e5ac0ac9259768c54498d5] |
[deb676605b5883a1afcefaadb06d2feba1959a5e] |
[40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a] |
[5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85] |
[172.17.22.217, 172.17.22.211] |
[172.17.22.217, 172.17.22.211] |
2 |
Success |
cp.dll |
C:\Program Files\BeyondTrust\bomgar-scc\68761134022\ |
ACH Credential Provider |
1174696 |
672aff5f06e5ac0ac9259768c54498d5 |
Automated Credential Handling |
24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6) |
BeyondTrust Corporation |
2025-07-15 08:28:36 +0000 UTC |
2025-07-15 08:28:36 +0000 UTC |
deb676605b5883a1afcefaadb06d2feba1959a5e |
40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a |
5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85 |
2025-07-15 08:28:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3a803dda1b5f33d0de97556e1cab952f0f97bb16bdff3657617328d29d35f3e5 |
[68a62c390de66b6bd84ed653, 68a62cbbbad0c3891c052034] |
[2] |
[SYSTEM] |
[u-NFP2, i-NFP1] |
[NT AUTHORITY] |
[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Magick.NET-Q16-AnyCPU.dll] |
[Servers] |
[Servers Audit] |
[v2310.898] |
[] |
[ImageMagick Studio LLC] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z] |
[2eb1441d4b71f974045d417bf0d83244] |
[19eb935d5c140f87e225a72d084e32a65302eca3] |
[f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6] |
[ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb] |
[172.25.17.195, 172.17.253.162] |
[172.25.17.195, 172.17.253.162] |
2 |
Success |
Magick.NET-Q16-AnyCPU.dll |
C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ |
Magick.NET Q16 AnyCPU net40 |
12438072 |
2eb1441d4b71f974045d417bf0d83244 |
Magick.NET-Q16-AnyCPU |
7.4.3.0 |
ImageMagick Studio LLC |
2018-03-12 04:16:00 +0000 UTC |
2018-03-12 04:16:00 +0000 UTC |
19eb935d5c140f87e225a72d084e32a65302eca3 |
f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6 |
ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb |
2025-05-06 18:30:02 +0000 UTC |
None |
None |
2022-06-21 13:00:33 +0000 UTC |
66 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-05-06 18:32:19.67 +0000 UTC |
| 004cd2403dd39a5b0f37521d49d96e6aa5dc4cec3c497c18fb3e2ca7251f1839 |
[68a31e9eca7b7527f86c6ca8, 68a31fe23d59934069ead436, 68a31fe23d59934069ead437, 68a31fe23d59934069ead438, 68a31fe23d59934069ead439, 68a322138bd13b5696d44fb0, 68a325d712844ae893875a07, 68a325d712844ae893875a08, 68a325d712844ae893875a0a, 68a3282fff5407347547ca9e, 68a33191ac64423ea16822ee, 68a33191ac64423ea16822ef, 68a5fd7014523931e7db330f, 68a5ffc9536a7a985c76561c, 68a5ffc9536a7a985c76561e, 68a5ffc9536a7a985c76561f, 68a5ffc9536a7a985c765620, 68a605e24d31d8fb8241a71d, 68a6083bfcc918b33d1bbc03] |
[2] |
[SYSTEM, CFNAdmin] |
[i-nCCMCPyxCCEP, i-nCCMCPyxCCET] |
[NT AUTHORITY, WVUHS] |
[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] |
[Servers] |
[Servers Audit] |
[v2248.849, v2250.850, v2253.852, v2255.853, v2307.897] |
["C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\scc-ui;qm=1;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\ui-stream-server-2931303782688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-7bafb86c-77a0-425c-9aba-05e07f22a813.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" -execfunc enum_cp 632515080, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic1.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-5b3e7749-b40a-4dd4-9d9f-d7ab08f7e111.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" -execfunc enum_cp 1854494281, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --kill-image-processes --kill-image-processes-exclude 7980, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-493f53c1-5930-4a24-87e2-28e204cfa4e3.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040619106, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040621110, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2042633891, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --uninstall] |
[BeyondTrust Corporation] |
[C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe, C:\Windows\System32\services.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] |
[C:\Program Files (x86)\CareFusion\RSS Remote Access Agent\RemoteAccess.Service.exe, C:\Windows\System32\wininit.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] |
[2025-08-18T12:37:44Z, 2025-08-18T12:37:45Z, 2025-08-18T12:41:44Z, 2025-08-18T12:41:45Z, 2025-08-18T12:42:11Z, 2025-08-18T12:45:40Z, 2025-08-18T13:02:31Z, 2025-08-18T13:02:32Z, 2025-08-18T13:03:11Z, 2025-08-18T13:11:54Z, 2025-08-18T13:55:17Z, 2025-08-18T13:55:18Z, 2025-08-20T16:53:03Z, 2025-08-20T16:53:04Z, 2025-08-20T16:53:09Z, 2025-08-20T16:53:44Z, 2025-08-20T16:53:46Z, 2025-08-20T17:27:19Z, 2025-08-20T17:29:51Z] |
[8447ea171cfef99d48c36cd3fe58e75e] |
[277e7c83686ce8b1d840cd8b10b952121f8dddcb] |
[cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab] |
[a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c] |
[172.17.22.217, 172.17.22.211] |
[172.17.22.217, 172.17.22.211] |
2 |
Success |
bomgar-scc.exe |
C:\Program Files\BeyondTrust\bomgar-scc\68761134022\ |
Remote Support Customer Client |
22436520 |
8447ea171cfef99d48c36cd3fe58e75e |
Remote Support Customer Client |
24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6) |
BeyondTrust Corporation |
2025-07-15 08:28:36 +0000 UTC |
2025-07-15 08:28:36 +0000 UTC |
277e7c83686ce8b1d840cd8b10b952121f8dddcb |
cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab |
a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c |
2025-07-15 08:28:49 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 0444971c7c19df0c4e5f8ad75c12ac277638470460eb7747122539960ed5e99f |
[68a5c64d54e5003d1abde4c4, 68a5c77e05aa879ada66b41f, 68a5c77e05aa879ada66b425, 68a5c77e05aa879ada66b42a, 68a5c77e05aa879ada66b42f, 68a5c77e05aa879ada66b433, 68a5c9d7599432010e418bd2] |
[2] |
[SVC_SL_RedSailTech, SYSTEM] |
[i-nQS1mgtn] |
[WVUHS, NT AUTHORITY] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe, C:\Windows\Temp\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[C:\Users\SVC_SL~1\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{58A25255-3CB8-4A17-A3C9-25023F29F7DC}, C:\Users\SVC_SL~1\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B8671B6F-617B-4826-9178-B43475CF91A7}, C:\Users\SVC_SL~1\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{5E032894-5063-4E54-A90B-D897D40099F5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D1371EF7-61B8-4622-BE96-DFE6C3D3E0A5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{8AD7745A-E0F4-41FE-8319-EFF8019D00DB}, C:\Users\SVC_SL~1\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{A3368B19-6720-427C-9D69-260D34BE8359}, C:\Windows\TEMP\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FBE48F2E-1398-48BF-8AE6-2A235E268844}] |
[Macrovision Corporation (Invalid Certificate Chain)] |
[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE, D:\QS1\QIA\03050201002QiaInst.EXE] |
[C:\Windows\explorer.exe, D:\QS1\QIA\Qia.exe] |
[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z, 2025-08-20T13:12:45Z] |
[4b56c021299344676f123fcb48f53c1e] |
[cbef3152c477c9176120030b164a4a807b527d8e] |
[949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c] |
[097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
ISBEW64.exe |
C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\ |
InstallShield (R) 64-bit Setup Engine |
70064 |
4b56c021299344676f123fcb48f53c1e |
InstallShield |
12.0 |
Macrovision Corporation (Invalid Certificate Chain) |
2025-07-17 15:57:14 +0000 UTC |
2006-05-17 14:21:40 +0000 UTC |
cbef3152c477c9176120030b164a4a807b527d8e |
949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c |
097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a |
2025-07-17 15:57:20 +0000 UTC |
None |
None |
2025-06-23 01:43:21 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-17 15:57:43.354 +0000 UTC |
| 1d2978f61d75fe69b8ed93b5bcc1b8fd25cb8a460294bdb695478118aa5ff636 |
[68a16bd60756fe54a9918fa8, 68a2149cb58debea69d7c753, 68a2bd5ff793a9057f329c0e, 68a3663261f8067c48423ec1, 68a40efceddb3a9f1a71a60a, 68a4b7cd36bc5d38057e236f] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMeshNetAgent.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] |
[2bf5f0103f41ad0f489491f5449ed8fc] |
[710375edab7207797e5c1934876f5aad0835c0ed] |
[aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627] |
[7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zMeshNetAgent.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
505656 |
2bf5f0103f41ad0f489491f5449ed8fc |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
710375edab7207797e5c1934876f5aad0835c0ed |
aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627 |
7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:02:45 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 1bec31633cd92c7e7b6897b5b7a117c32f9bec3abc83a5ae122dc67cfe770e0f |
[68a16bd60756fe54a9918f91, 68a2149cb58debea69d7c73f, 68a2bd5ff793a9057f329bf9, 68a3663261f8067c48423ead, 68a40efceddb3a9f1a71a5f3, 68a4b7cd36bc5d38057e235b] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\reslib.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[db53771ef4c80df47010df1b9b74ccca] |
[04235cf9f35465752309b98f0f11bcc5886f45db] |
[2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410] |
[7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
reslib.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
57144 |
db53771ef4c80df47010df1b9b74ccca |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
04235cf9f35465752309b98f0f11bcc5886f45db |
2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410 |
7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 05:59:58 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 247834099661008e2e66f0f29941d1402246e7afdeafd3c902c36d3c280c6ccc |
[68a48674c4cb2500be69260e, 68a48674c4cb2500be692624] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Formatting.Compact.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[a500c5577afb7e7c1fc08779e5447f39] |
[f4fe77f7f9dbafb9a1f09302d9d7704762cd5048] |
[9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb] |
[fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Formatting.Compact.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Formatting.Compact |
20744 |
a500c5577afb7e7c1fc08779e5447f39 |
Serilog.Formatting.Compact |
1.1.0 |
Stryker Corporation |
2019-10-17 10:18:46 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
f4fe77f7f9dbafb9a1f09302d9d7704762cd5048 |
9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb |
fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a |
[68a5c64d54e5003d1abde4c2, 68a5c77e05aa879ada66b41e, 68a5c77e05aa879ada66b424, 68a5c77e05aa879ada66b429, 68a5c77e05aa879ada66b42e, 68a5c77e05aa879ada66b432] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\_IsRes.dll] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Macrovision Corporation (Invalid Certificate Chain)] |
[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z] |
[e54601d8a464a455de081d63d4b7927d] |
[0ff6da399c123394cca3b4cc64a41d8037787b73] |
[34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa] |
[5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
_IsRes.dll |
C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\ |
FLEXnet (R) InstallShield (R) Dialog Resources |
123312 |
e54601d8a464a455de081d63d4b7927d |
InstallShield |
12.0 |
Macrovision Corporation (Invalid Certificate Chain) |
2025-07-17 15:57:15 +0000 UTC |
2006-05-17 14:19:28 +0000 UTC |
0ff6da399c123394cca3b4cc64a41d8037787b73 |
34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa |
5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05 |
2025-07-17 15:57:20 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 2b3c5867c013952c0c01a0604e9fab348297e52f7a1ceee65318d3ebb2be888d |
[68a25fb2e970d941642e7edd, 68a25fb2e970d941642e7eea, 68a3b2cf09045b56b2a707b5, 68a3b2cf09045b56b2a707c2, 68a502e12ae1a61fbf4caf13, 68a502e12ae1a61fbf4caf20] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\dbatools.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z] |
[b51cf28a2350177a4572c66c016c2103] |
[5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa] |
[c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386] |
[55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
dbatools.dll |
C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\ |
dbatools |
160672 |
b51cf28a2350177a4572c66c016c2103 |
dbatools |
1.0.0 |
dbatools |
2024-03-28 18:35:12 +0000 UTC |
2024-03-09 14:53:34 +0000 UTC |
5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa |
c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386 |
55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb |
2025-05-10 23:00:33 +0000 UTC |
None |
None |
2024-03-24 01:06:35 +0000 UTC |
43 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-05-10 23:01:16.463 +0000 UTC |
| 2e2080bfb96ee899e9ddbc4d7d3fc32bb0c8b70e167c44af62861c3b6bba2753 |
[68a16bd60756fe54a9918fa2, 68a2149cb58debea69d7c74d, 68a2bd5ff793a9057f329c08, 68a3663261f8067c48423ebb, 68a40efceddb3a9f1a71a604, 68a4b7cd36bc5d38057e2369] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zAutoUpdate.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[9f75a49b3b2b2629b9292a2500a37bb7] |
[bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3] |
[317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81] |
[8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zAutoUpdate.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
56632 |
9f75a49b3b2b2629b9292a2500a37bb7 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3 |
317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81 |
8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:17 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 2fa0c8055ed4dd4b3be006b6ae7fb7f563b79393f21a66d682b56f92e221dc01 |
[68a611738671451adb8f5997] |
[2] |
[DEVSCCMADM] |
[DP-Warehouse] |
[DEV-WVUHS] |
[C:\Windows\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp] |
[Servers] |
[Servers Audit] |
[v2307.897] |
["C:\WINDOWS\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp" /SL5="$70C2C,11857990,180224,C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe" /VERYSILENT /DIR=C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\ /EXTRACT="YES"] |
[Lenovo] |
[C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe] |
[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe] |
[2025-08-20T18:16:58Z] |
[61431127214fa224f8da58e06ba8831e] |
[472aa381a40e1455ce7aadd87d2a2b47d4e05cb5] |
[1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc] |
[c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7] |
[172.16.200.2] |
[172.16.200.2] |
1 |
Success |
m2wlg08us14.tmp |
C:\Windows\TempInst\is-Q9LLO.tmp\ |
Setup/Uninstall |
2917392 |
61431127214fa224f8da58e06ba8831e |
|
|
Lenovo |
2025-05-12 18:26:03 +0000 UTC |
2025-05-12 18:26:03 +0000 UTC |
472aa381a40e1455ce7aadd87d2a2b47d4e05cb5 |
1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc |
c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7 |
2025-05-12 18:26:13 +0000 UTC |
None |
None |
2022-11-05 07:38:45 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-05-12 18:28:22.207 +0000 UTC |
| 30ba0c3d915cdd4487952120eba8205e1d1acd2017b272c1c1a30c08427bf548 |
[68a16bd60756fe54a9918f93, 68a2149cb58debea69d7c740, 68a2bd5ff793a9057f329bfa, 68a3663261f8067c48423eae, 68a40efceddb3a9f1a71a5f4, 68a4b7cd36bc5d38057e235c] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetUtils.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[230b8336c1852e9a94a3df36af12c82c] |
[54d436628aa6c32a6e72b86ef79da23d455eeca9] |
[3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd] |
[36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zNetUtils.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
638264 |
230b8336c1852e9a94a3df36af12c82c |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
54d436628aa6c32a6e72b86ef79da23d455eeca9 |
3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd |
36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:39 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 2be3b84d9b1ddf317e94d3345117c0192e80ff50445538ae0c54066ae2c8e607 |
[68a48674c4cb2500be692614, 68a48674c4cb2500be69262a] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.DataAccessLayer.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[7585a161b995fa0f4eb3ddc40d2d0f48] |
[00e62d3ef0e9c5eab320fb45443f6a5b77079a89] |
[a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11] |
[deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
StrykerIOTAPI.DataAccessLayer.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
StrykerIOTAPI.DataAccessLayer |
27920 |
7585a161b995fa0f4eb3ddc40d2d0f48 |
StrykerIOTAPI.DataAccessLayer |
1.0.0 |
Stryker Corporation |
2023-03-16 10:22:36 +0000 UTC |
2024-02-15 18:02:05 +0000 UTC |
00e62d3ef0e9c5eab320fb45443f6a5b77079a89 |
a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11 |
deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 33a3d3d9bd487908bea1e47b090ea5599628d2f4ee8fe3fda515360828377884 |
[68a48674c4cb2500be692612, 68a48674c4cb2500be692628] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.DataAccessLayer.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z] |
[a7216a138fc22c7273f6edec8e3b41a6] |
[115294144ead55ae4d0975d87bf46e84d568a87b] |
[6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8] |
[ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
SEWSI.DataAccessLayer.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
SEWSI.DataAccessLayer |
59648 |
a7216a138fc22c7273f6edec8e3b41a6 |
Connected Hospital |
1.0.0.0 |
Stryker Corporation |
2023-03-16 10:22:38 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
115294144ead55ae4d0975d87bf46e84d568a87b |
6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8 |
ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3448afe3dc141186a6c6b620a1311cba33347e39cca4770bd490971f1ad4b720 |
[68a5e788692da313f892a120, 68a5e788692da313f892a121, 68a5e788692da313f892a123, 68a5e788692da313f892a124, 68a5f7f47c4424bb71e0a54c, 68a5f7f47c4424bb71e0a54d, 68a614164c5f9631798f265b, 68a614164c5f9631798f265c] |
[2] |
[SYSTEM, GEHEALTHCARE] |
[u-nviewpoint01] |
[NT AUTHORITY, U-NVIEWPOINT01] |
[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] |
[Servers] |
[Servers Audit] |
[v2299.891, v2306.895, v2307.897] |
["C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --install-setup elevated --original-installer C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\scc-ui;qm=0;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\ui-stream-server-2598735024688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179926804, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179928823, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184107212, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184110252, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191731809, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191733079] |
[Bomgar Corporation] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] |
[2025-08-20T15:09:53Z, 2025-08-20T15:09:54Z, 2025-08-20T15:10:10Z, 2025-08-20T15:10:12Z, 2025-08-20T16:19:50Z, 2025-08-20T16:19:53Z, 2025-08-20T18:26:55Z, 2025-08-20T18:26:56Z] |
[0c77dd32f741f6067ac3e399b74f593e] |
[e15772572e59e0f8609c248781896b10b164c38a] |
[01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b] |
[349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36] |
[172.25.17.210] |
[172.25.17.210] |
1 |
Success |
bomgar-scc.exe |
C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\ |
Remote Support Customer Client |
21975120 |
0c77dd32f741f6067ac3e399b74f593e |
Remote Support Customer Client |
24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) |
Bomgar Corporation |
2025-07-23 17:47:08 +0000 UTC |
2025-07-23 17:47:08 +0000 UTC |
e15772572e59e0f8609c248781896b10b164c38a |
01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b |
349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36 |
2025-07-23 17:47:21 +0000 UTC |
None |
None |
2025-05-23 06:26:22 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-23 17:51:40.399 +0000 UTC |
| 369ed67f529db9ddc1b609f2c9340263faa72cd366a4e56589df29de1df74c5c |
[68a48674c4cb2500be692611, 68a48674c4cb2500be692627] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Stryker.iBedServer.Common.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[597d9c63bf971dd23ead4d6abf7295b8] |
[9ba9d7d94b70830e230ef01b19bab207b253f1d5] |
[442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5] |
[8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Stryker.iBedServer.Common.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Stryker.iBedServer.Common |
38664 |
597d9c63bf971dd23ead4d6abf7295b8 |
Stryker.iBedServer.Common |
1.0.0 |
Stryker Corporation |
2023-03-16 10:22:14 +0000 UTC |
2024-02-15 18:02:05 +0000 UTC |
9ba9d7d94b70830e230ef01b19bab207b253f1d5 |
442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5 |
8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 3742126367753aaa1e94fbbc1c0f86375127f0024d89b5f22406b39dc7082c02 |
[68a48674c4cb2500be692607, 68a48674c4cb2500be69261d] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] |
[253a5be96bc1ef00690a3397f704cbe2] |
[c15efe63cb85ec86abe7a6be8d185207ec6a7df4] |
[1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517] |
[c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog |
148192 |
253a5be96bc1ef00690a3397f704cbe2 |
Serilog |
2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19 |
Stryker Corporation |
2022-04-24 05:03:44 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
c15efe63cb85ec86abe7a6be8d185207ec6a7df4 |
1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517 |
c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259 |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 14cff831fedb21345ae1e9d261be91db71cade583ee95eee142b420fa7f14bc6 |
[68a48674c4cb2500be692619, 68a48674c4cb2500be69262f] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.BusinessEntities.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[673377d67ea0e4d61e412e2511cdd987] |
[62f1432c45e44d92fad2645de312136f6c729af3] |
[7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228] |
[6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
SEWSI.BusinessEntities.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
SEWSI.BusinessEntities |
139520 |
673377d67ea0e4d61e412e2511cdd987 |
Connected Hospital |
1.0.0.0 |
Stryker Corporation |
2023-03-16 10:22:36 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
62f1432c45e44d92fad2645de312136f6c729af3 |
7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228 |
6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 39bbb6b1fcd1c8a929c0111fa2ebcc2fbf66c2ab7b987badcb37459a05e14b72 |
[68a48674c4cb2500be69260a, 68a48674c4cb2500be692620] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.File.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] |
[be27dd9f311cd665785bbdeaea480d98] |
[af0cfabc15f87dcc8e37b65d70480600a7bf5cb9] |
[ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5] |
[4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Sinks.File.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Sinks.File |
43256 |
be27dd9f311cd665785bbdeaea480d98 |
Serilog.Sinks.File |
5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468 |
Stryker Corporation |
2021-06-25 13:00:48 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
af0cfabc15f87dcc8e37b65d70480600a7bf5cb9 |
ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5 |
4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 42e566b4052546e3dff1eadc7074fe9c78c7a23247ad65d4b2d5682a99be3ed0 |
[68a16bd60756fe54a9918fa6, 68a2149cb58debea69d7c751, 68a2bd5ff793a9057f329c0c, 68a3663261f8067c48423ebf, 68a40efceddb3a9f1a71a608, 68a4b7cd36bc5d38057e236d] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cares.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] |
[4de26bd98f5b002370bb3332692dbf66] |
[54751e33aea7127bf9e82ad6efe87cbbfc27c009] |
[364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d] |
[8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
cares.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
c-ares Shared Library |
174904 |
4de26bd98f5b002370bb3332692dbf66 |
The c-ares library |
1.27.0 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
54751e33aea7127bf9e82ad6efe87cbbfc27c009 |
364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d |
8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:35 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 436d5ae5ca7125b3a71d8c26b32dfa31d18f7a54e3919e8eaa7005aed2458567 |
[68a48674c4cb2500be692613, 68a48674c4cb2500be692629] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerGen.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z] |
[1ca814e6162846973fb2c387d0b9fb3c] |
[0db114a6b28dc4baf9b46f724e3f679f31903ddc] |
[4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d] |
[6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Swashbuckle.AspNetCore.SwaggerGen.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Swashbuckle.AspNetCore.SwaggerGen |
108824 |
1ca814e6162846973fb2c387d0b9fb3c |
Swashbuckle.AspNetCore.SwaggerGen |
6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 |
Stryker Corporation |
2023-01-11 11:48:24 +0000 UTC |
2024-02-15 18:02:06 +0000 UTC |
0db114a6b28dc4baf9b46f724e3f679f31903ddc |
4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d |
6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4698d9455955cd75c09ba12cffbc46e561afb67dae454c6d4cfaa21e481639f9 |
[68a16bd60756fe54a9918f94, 68a2149cb58debea69d7c73c, 68a2bd5ff793a9057f329bfd, 68a3663261f8067c48423eac, 68a40efceddb3a9f1a71a5f8, 68a4b7cd36bc5d38057e235a] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\tp.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[849f202bfe27a29199a8365d73f3079b] |
[47561e1037201d35a1a22df95bbf0c1e6660d03b] |
[b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033] |
[be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
tp.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Transport Module |
2134328 |
849f202bfe27a29199a8365d73f3079b |
Zoom Video Call |
1, 0, 2012, 1222 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
47561e1037201d35a1a22df95bbf0c1e6660d03b |
b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033 |
be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:00:02 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 4c1fe405524586b09643b46738f06ab76006a4516a1830cf43f2db9af291a70b |
[68a51e78b5a781145bf61337] |
[2] |
[SYSTEM] |
[i-ncapsule12] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe] |
[Servers] |
[Servers Audit] |
[v2284] |
["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe"] |
[PHILIPS FRANCE COMMERCIAL SAS] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T01:01:38Z] |
[4842e91bd9b7b98c4c699839dd969142] |
[b658ce9655e9cf14aec4089ae2a1c257ea24eb19] |
[cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861] |
[67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
DataCaptorIS.exe |
C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\ |
DataCaptor Interface Server Service |
297696 |
4842e91bd9b7b98c4c699839dd969142 |
DataCaptor |
11.8.1.345 |
PHILIPS FRANCE COMMERCIAL SAS |
2024-11-12 22:03:50 +0000 UTC |
2025-08-20 01:01:22 +0000 UTC |
b658ce9655e9cf14aec4089ae2a1c257ea24eb19 |
cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861 |
67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480 |
2025-08-20 01:01:44 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4818a0297cff2e7386a18a84c2c3bb66709c591669de6ab221e9c8e84561582c |
[68a16bd60756fe54a9918fa9, 68a2149cb58debea69d7c754, 68a2bd5ff793a9057f329c0f, 68a3663261f8067c48423ec2, 68a40efceddb3a9f1a71a60b, 68a4b7cd36bc5d38057e2370] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zDiagnostic.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] |
[9efc68196d98f658640751c4762d005b] |
[be6cd4a37d595a950c683b19744430ae3e2dac02] |
[091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904] |
[7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zDiagnostic.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
2399032 |
9efc68196d98f658640751c4762d005b |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
be6cd4a37d595a950c683b19744430ae3e2dac02 |
091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904 |
7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:02:43 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 4ec5a20b06f30a4643063c89804b78887d0a3f1705da59076aa1374691ae49c0 |
[68a25fb2e970d941642e7ed8, 68a25fb2e970d941642e7ee5, 68a3b2cf09045b56b2a707b0, 68a3b2cf09045b56b2a707bd, 68a502e12ae1a61fbf4caf0e, 68a502e12ae1a61fbf4caf1b] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\dbatools.library.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z] |
[83b05d20cf1ac5d2691bd9e2bc7293ee] |
[29965b7d9a477168b9868cc8c2102d6a093e6964] |
[d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033] |
[1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
dbatools.library.psm1 |
C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\ |
|
18766 |
83b05d20cf1ac5d2691bd9e2bc7293ee |
|
|
dbatools |
2024-03-28 18:35:33 +0000 UTC |
2024-03-09 14:53:38 +0000 UTC |
29965b7d9a477168b9868cc8c2102d6a093e6964 |
d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033 |
1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d |
2025-08-08 23:00:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 4af3d3e1a71f70b731ca3aaa9e00cc505835f9f8574e257760dd8679cf51ea32 |
[68a16bd60756fe54a9918f99, 68a2149cb58debea69d7c745, 68a2bd5ff793a9057f329c00, 68a3663261f8067c48423eb3, 68a40efceddb3a9f1a71a5fb, 68a4b7cd36bc5d38057e2361] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libssl-3-zm.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[ca33cbd72c623d073b7401dd2473ae85] |
[fa6724135804a2757d2fb34956f45b537a70debc] |
[fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf] |
[61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
libssl-3-zm.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
OpenSSL library |
1340216 |
ca33cbd72c623d073b7401dd2473ae85 |
The OpenSSL Toolkit |
3.3.3 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
fa6724135804a2757d2fb34956f45b537a70debc |
fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf |
61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:02:30 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 5c623c30f0f4df4ae5f86ae7fcbdbb06dd130f24b338735f5a9976e4946ea25a |
[68a51e6e706e3d7436cc664e] |
[2] |
[SYSTEM] |
[i-ncapsule12] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe] |
[Servers] |
[Servers Audit] |
[v2284] |
["C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe"] |
[PHILIPS FRANCE COMMERCIAL SAS] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-20T01:01:27Z] |
[c856c6a75a00d53167951d3206715225] |
[f8c8f8250c03f193ca35ff3c600e067a0533d85f] |
[fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad] |
[798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
Capsule.Server.Cortex.Hosts.WindowsService.exe |
C:\Program Files (x86)\Capsule Technologie\Neuron Server\ |
Capsule.Server.Cortex.Hosts.WindowsService |
21216 |
c856c6a75a00d53167951d3206715225 |
Capsule.Server.Cortex.Hosts.WindowsService |
11.8.1.345 |
PHILIPS FRANCE COMMERCIAL SAS |
2024-11-12 22:08:04 +0000 UTC |
2025-08-20 01:01:22 +0000 UTC |
f8c8f8250c03f193ca35ff3c600e067a0533d85f |
fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad |
798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6 |
2025-08-20 01:01:34 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 56d0f79bbdbff4255d2d70d497607968271b3065b3f96765a6211a8ba1b8bcb5 |
[68a16bd60756fe54a9918fa5, 68a2149cb58debea69d7c750, 68a2bd5ff793a9057f329c0b, 68a3663261f8067c48423ebe, 68a40efceddb3a9f1a71a607, 68a4b7cd36bc5d38057e236c] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNet.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] |
[021ad60cb0c6b2defe570821010f08c8] |
[e2be2678bb68af4e0a5eb2ca709140e7e48261ad] |
[9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a] |
[b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zNet.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
2385720 |
021ad60cb0c6b2defe570821010f08c8 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
e2be2678bb68af4e0a5eb2ca709140e7e48261ad |
9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a |
b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:02:48 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 6339ff3a3b98f030ee18cb09698e5e48159211697d8c5d4849d1d022e1cece46 |
[68a5e5e6f3ba24788e4c61e7] |
[2] |
[SYSTEM] |
[UH-APPS] |
[NT AUTHORITY] |
[C:\Windows\System32\drivers\VirtFile.sys] |
[Servers] |
[Servers Audit] |
[v2298.891] |
[] |
[Symantec Corporation (Invalid Certificate Chain)] |
[Non-existent] |
[Non-existent] |
[2025-08-20T15:02:32Z] |
[b6385c9cba13a1beaa7f38625bc0d803] |
[ef0eeab606e4324fe12951421e21660416a99ea4] |
[cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3] |
[d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a] |
[172.17.253.46] |
[172.17.253.46] |
1 |
Success |
VirtFile.sys |
C:\Windows\System32\drivers\ |
Allows granular display of back ups. |
114848 |
b6385c9cba13a1beaa7f38625bc0d803 |
Symantec Backup Exec(TM) for Windows Servers |
2.0.95 |
Symantec Corporation (Invalid Certificate Chain) |
2013-06-11 19:10:48 +0000 UTC |
2012-10-16 15:51:04 +0000 UTC |
ef0eeab606e4324fe12951421e21660416a99ea4 |
cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3 |
d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a |
2025-07-21 22:05:35 +0000 UTC |
None |
None |
2022-01-23 16:45:00 +0000 UTC |
67 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-21 22:11:52.243 +0000 UTC |
| 645bee92ba4e9f32ddfdd9f8519dc1b9f9ff0b0a8e87e342f08d39da77e499a9 |
[68a4e8a1ad898641af98fd95, 68a4fcd0011d94a251a4ef31] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe] |
[Servers] |
[Servers Audit] |
[v2283, v2284] |
["C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe" /S /SELECT_UTILITIES=1] |
[OpenVPN Technologies, Inc.] |
[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] |
[C:\Windows\System32\msiexec.exe] |
[2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z] |
[47fa5f0670cf191d066e5dfbf4f4ee70] |
[db9d441c209fb28b7c07286a74fe000738304dac] |
[d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf] |
[514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
tap-windows.exe |
C:\Users\CA_gs10109\AppData\Local\Temp\ |
|
256240 |
47fa5f0670cf191d066e5dfbf4f4ee70 |
|
|
OpenVPN Technologies, Inc. |
2016-04-21 13:41:08 +0000 UTC |
2016-04-21 13:41:08 +0000 UTC |
db9d441c209fb28b7c07286a74fe000738304dac |
d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf |
514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713 |
2025-08-19 21:12:01 +0000 UTC |
None |
None |
2025-08-18 13:19:27 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-19 21:16:02.876 +0000 UTC |
| 6ff536c7f6ed2e96f08f189984ec0ef5969ec88730b604a463c6cec22e20a9cd |
[68a16bd60756fe54a9918f8c, 68a2149cb58debea69d7c737, 68a2bd5ff793a9057f329bf3, 68a3663261f8067c48423ea5, 68a40efceddb3a9f1a71a5ee, 68a4b7cd36bc5d38057e2353] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\UIBase.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[9eedaf27cc28bd73c5ff41c49961872d] |
[6b1abcc8e82fe290522c3bbc48ae7e525aecd356] |
[d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e] |
[318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
UIBase.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
2006840 |
9eedaf27cc28bd73c5ff41c49961872d |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
6b1abcc8e82fe290522c3bbc48ae7e525aecd356 |
d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e |
318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:01:00 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 6d8d84c9c14201674d9a309f51e952cf148ad33cdb66507d9677ebf1b1e4432b |
[68a5c661c3778510bbc82847] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[D:\QS1\DataExportService\updater\Serilog.Sinks.File.dll] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Not Signed] |
[D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe] |
[D:\QS1\QAU\Updates\767A003SERVERINST.EXE] |
[2025-08-20T12:58:06Z] |
[4c2b0737d9a73da09172d3c210b0265d] |
[a35a98ec72154cc1d112f46bd177a7f043dbcd46] |
[b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0] |
[c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
Serilog.Sinks.File.dll |
C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\ |
Serilog.Sinks.File |
28160 |
4c2b0737d9a73da09172d3c210b0265d |
Serilog.Sinks.File |
4.1.0-master-272085f+272085f4c9440e62448b65829ad35cc3dea15ab1 |
EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 |
2023-10-20 19:06:01 +0000 UTC |
2023-10-20 19:06:17 +0000 UTC |
a35a98ec72154cc1d112f46bd177a7f043dbcd46 |
b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0 |
c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8 |
2025-03-24 14:02:17 +0000 UTC |
None |
None |
2025-03-28 01:13:07 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Microsoft attested file |
2025-04-10 02:18:37.703 +0000 UTC |
| 6ded799728a24a6abd426120e7192d1ce5af4ecb86f36f605d703a0aead15a61 |
[68a48674c4cb2500be692616, 68a48674c4cb2500be69262c] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.ServiceClient.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[0e468c88955fd864f98ac6f9e1bf50e6] |
[13cc23e673a7d51e2124ba64e5f9f7727687f0d7] |
[795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53] |
[6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
StrykerIOTAPI.ServiceClient.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
StrykerIOTAPI.ServiceClient |
23816 |
0e468c88955fd864f98ac6f9e1bf50e6 |
StrykerIOTAPI.ServiceClient |
1.0.0 |
Stryker Corporation |
2023-03-16 10:22:36 +0000 UTC |
2024-02-15 18:02:06 +0000 UTC |
13cc23e673a7d51e2124ba64e5f9f7727687f0d7 |
795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53 |
6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 746001b9638c9979966e0b886bcd72105825eabc5c56d9e94521e8afe83fce98 |
[68a16bd60756fe54a9918faa, 68a2149cb58debea69d7c755, 68a2bd5ff793a9057f329c10, 68a3663261f8067c48423ec3, 68a40efceddb3a9f1a71a60c, 68a4b7cd36bc5d38057e2371] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetDiagnostic.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] |
[0333571cd1fe94145d29e4f8ee0412b9] |
[0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663] |
[b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958] |
[a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zNetDiagnostic.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
240440 |
0333571cd1fe94145d29e4f8ee0412b9 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663 |
b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958 |
a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:07:17 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 70fa7f0aa2feb397597b2785a4bfdb2c9cd36e0edb51f4f0dfe6ac086290ac86 |
[68a5c64d54e5003d1abde4c1, 68a5c77e05aa879ada66b41d, 68a5c77e05aa879ada66b423, 68a5c77e05aa879ada66b428, 68a5c77e05aa879ada66b42d, 68a5c77e05aa879ada66b431] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\isrt.dll] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Macrovision Corporation (Invalid Certificate Chain)] |
[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z] |
[b35dde51d14f9400e73196693148734e] |
[9410c5268f5558e57d044780d0d5dcc7aa181299] |
[373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde] |
[6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
isrt.dll |
C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\ |
InstallShield (R) RunTime DLL |
208304 |
b35dde51d14f9400e73196693148734e |
InstallShield |
12.0 |
Macrovision Corporation (Invalid Certificate Chain) |
2025-07-17 15:57:15 +0000 UTC |
2006-05-17 14:21:20 +0000 UTC |
9410c5268f5558e57d044780d0d5dcc7aa181299 |
373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde |
6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d |
2025-07-17 15:57:20 +0000 UTC |
None |
None |
2025-04-28 10:02:02 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-17 15:57:43.354 +0000 UTC |
| 766f9eeacde29ca3ebe85d8d233775dc8acba7a244dd24bc13896ec23d8c2c84 |
[68a48674c4cb2500be69260d, 68a48674c4cb2500be692623] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Logging.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[1b4f4c9db2726c138f5ab17aaecd4d45] |
[a35c56b96b73ff7667988001ac1b4a57ac024b9e] |
[f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999] |
[0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Extensions.Logging.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Extensions.Logging |
29448 |
1b4f4c9db2726c138f5ab17aaecd4d45 |
Serilog.Extensions.Logging |
3.1.0 |
Stryker Corporation |
2021-11-02 02:38:50 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
a35c56b96b73ff7667988001ac1b4a57ac024b9e |
f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999 |
0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378 |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 74f63a755ad1b7cc7ffdbd4d457a311b5fc3c773dc37766c345f749219f527b2 |
[68a25fb2e970d941642e7ee4, 68a25fb2e970d941642e7ef1, 68a3b2cf09045b56b2a707bc, 68a3b2cf09045b56b2a707c9, 68a502e12ae1a61fbf4caf1a, 68a502e12ae1a61fbf4caf27] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\type-extensions.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:12Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z] |
[838211c05894e640796e49104f1b37a4] |
[fbcc36198fa33af6404259160ffc57cf8a604f22] |
[b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810] |
[6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
type-extensions.ps1 |
C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\ |
|
13106 |
838211c05894e640796e49104f1b37a4 |
|
|
dbatools |
2024-03-28 19:42:23 +0000 UTC |
2024-03-16 13:33:46 +0000 UTC |
fbcc36198fa33af6404259160ffc57cf8a604f22 |
b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810 |
6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08 |
2025-08-08 23:00:16 +0000 UTC |
None |
None |
2024-09-24 17:17:27 +0000 UTC |
63 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-08 23:01:52.488 +0000 UTC |
| 84a92f1878d1db1c398f021aa01d0a12ec303ef540927b562e71134855b23f48 |
[68a16bd60756fe54a9918fa1, 68a2149cb58debea69d7c74c, 68a2bd5ff793a9057f329c07, 68a3663261f8067c48423eba, 68a40efceddb3a9f1a71a603, 68a4b7cd36bc5d38057e2368] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWebService.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[c1f4a307abccb3ff203409f4e41e68b9] |
[4c9a363eec7a97f06a1db1b6d80b38c5e85e342d] |
[079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460] |
[8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zWebService.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
7973176 |
c1f4a307abccb3ff203409f4e41e68b9 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:38 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
4c9a363eec7a97f06a1db1b6d80b38c5e85e342d |
079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460 |
8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-06-12 09:15:04 +0000 UTC |
71 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 0fc2a2df59b98cdead92680cfa9e0e56d54ae7ac3a0aa35470cf25c46702c7c7 |
[68a48674c4cb2500be692618, 68a48674c4cb2500be69262e] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.RuleLogic.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[30a991d876163681c6baac37e99f0591] |
[bb6e8c432d7c814f1164708197af529f0f4e2dc6] |
[afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71] |
[68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
StrykerIOTAPI.RuleLogic.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
StrykerIOTAPI.RuleLogic |
39680 |
30a991d876163681c6baac37e99f0591 |
StrykerIOTAPI.RuleLogic |
1.0.0 |
Stryker Corporation |
2023-03-16 10:22:38 +0000 UTC |
2024-02-15 18:02:06 +0000 UTC |
bb6e8c432d7c814f1164708197af529f0f4e2dc6 |
afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71 |
68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 097bbfae1d0892c24236778e721ffe5fc95b840bc664d8a3913220a6d2d49d2e |
[68a16bd60756fe54a9918f8e, 68a2149cb58debea69d7c739, 68a2bd5ff793a9057f329bf4, 68a3663261f8067c48423ea4, 68a40efceddb3a9f1a71a5f0, 68a4b7cd36bc5d38057e2352] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\msaalib.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[6a50b127ea76fb89e03c2d875f6a7ac9] |
[c28b7cddcfd0a7d635ebca504a463eef23e082db] |
[85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985] |
[16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
msaalib.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
53560 |
6a50b127ea76fb89e03c2d875f6a7ac9 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
c28b7cddcfd0a7d635ebca504a463eef23e082db |
85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985 |
16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:01:40 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 85e9971db788a2fbcb79a597f116557fdaefc0a2164cec5c139beb7a33776ae0 |
[68a48674c4cb2500be692608, 68a48674c4cb2500be69261e] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Settings.Configuration.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] |
[3730789496ff9f88accaf6bec1cbf7ba] |
[4371262d52547a51dda48e130f70806dbe766284] |
[23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd] |
[80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Settings.Configuration.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Settings.Configuration |
76560 |
3730789496ff9f88accaf6bec1cbf7ba |
Serilog.Settings.Configuration |
3.3.0+651449dd4277217838b9224ba13acf66f5f95351 |
Stryker Corporation |
2021-10-07 13:46:44 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
4371262d52547a51dda48e130f70806dbe766284 |
23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd |
80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696 |
[68a5c64d54e5003d1abde4c0, 68a5c77e05aa879ada66b41c, 68a5c77e05aa879ada66b422, 68a5c77e05aa879ada66b427, 68a5c77e05aa879ada66b42c, 68a5c77e05aa879ada66b430] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\_Setup.dll] |
[Servers] |
[Servers Audit] |
[v2287.880] |
[] |
[Macrovision Corporation (Invalid Certificate Chain)] |
[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] |
[C:\Windows\System32\svchost.exe] |
[2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z, 2025-08-20T13:01:48Z] |
[30ebd4e80b1dda05eac709a1dc5965b4] |
[2418232370026574baabc84b105f6dd9e458ad86] |
[fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774] |
[5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
_Setup.dll |
C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\ |
FLEXnet (R) InstallShield (R) Setup Launcher Resources |
164784 |
30ebd4e80b1dda05eac709a1dc5965b4 |
InstallShield |
12.0 |
Macrovision Corporation (Invalid Certificate Chain) |
2025-07-17 15:57:14 +0000 UTC |
2025-04-14 15:20:00 +0000 UTC |
2418232370026574baabc84b105f6dd9e458ad86 |
fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774 |
5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557 |
2025-07-17 15:57:20 +0000 UTC |
None |
None |
2025-05-15 06:19:28 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-16 22:12:52.389 +0000 UTC |
| 89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0 |
[68a4e8b52033a4a8e5a0e977, 68a4fcd0011d94a251a4ef36, 68a4fcd0011d94a251a4ef43] |
[2] |
[SYSTEM] |
[i-ncapsule12] |
[NT AUTHORITY] |
[C:\Windows\System32\drivers\tap0901.sys] |
[Servers] |
[Servers Audit] |
[v2283, v2284] |
[] |
[OpenVPN Technologies, Inc.] |
[Non-existent] |
[Non-existent] |
[2025-08-19T21:12:19Z, 2025-08-19T22:09:45Z, 2025-08-19T22:18:18Z] |
[d765f43cbea72d14c04af3d2b9c8e54b] |
[daebe266073616e5fc931c319470fcf42a06867a] |
[f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33] |
[ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
tap0901.sys |
C:\Windows\System32\drivers\ |
TAP-Windows Virtual Network Driver (NDIS 6.0) |
27136 |
d765f43cbea72d14c04af3d2b9c8e54b |
TAP-Windows Virtual Network Driver (NDIS 6.0) |
9.21.2 9/21 |
OpenVPN Technologies, Inc. |
2016-04-21 09:10:04 +0000 UTC |
2016-04-21 09:10:04 +0000 UTC |
daebe266073616e5fc931c319470fcf42a06867a |
f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33 |
ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2 |
2025-08-19 21:12:21 +0000 UTC |
None |
None |
2025-08-18 13:01:34 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-19 21:16:02.876 +0000 UTC |
| 93e1c58a8b37a06fd12513dac10c56cb4f8142f59bf22ade44711fc3fa700549 |
[68a16bd60756fe54a9918f97, 68a2149cb58debea69d7c742, 68a2bd5ff793a9057f329bfb, 68a3663261f8067c48423eaf, 68a40efceddb3a9f1a71a5f7, 68a4b7cd36bc5d38057e235d] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zLooper.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[09bccc0138705459b9770a748b63b844] |
[63ea04e8e1d4267982eafc40cd7f408dcb17f0d1] |
[ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a] |
[bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zLooper.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
69432 |
09bccc0138705459b9770a748b63b844 |
Zoom |
1,0,0,0 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
63ea04e8e1d4267982eafc40cd7f408dcb17f0d1 |
ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a |
bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:04:30 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 950b75c140c5d9c3199f5ca51b4100e7cca3bc9e0f71724a32881ef7f8a287d9 |
[68a16bd60756fe54a9918f8d, 68a2149cb58debea69d7c738, 68a2bd5ff793a9057f329bf1, 68a3663261f8067c48423ea7, 68a40efceddb3a9f1a71a5ef, 68a4b7cd36bc5d38057e2355] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Cmmlib.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[b394dfb05ceb80ac63edb50de392a1c7] |
[63c411b9ee55ddc4710dc2658a330b3a40fae4e0] |
[91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4] |
[49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
Cmmlib.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
2822456 |
b394dfb05ceb80ac63edb50de392a1c7 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
63c411b9ee55ddc4710dc2658a330b3a40fae4e0 |
91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4 |
49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:01:05 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 8df0f98abff9c236fe721fb72e8aeebd922e8066668caa17a4dd205b0b7c0943 |
[68a16bd60756fe54a9918f98, 68a2149cb58debea69d7c743, 68a2bd5ff793a9057f329bfc, 68a3663261f8067c48423eb0, 68a40efceddb3a9f1a71a5f9, 68a4b7cd36bc5d38057e235e] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZMDB.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[0df7de126b6940fc83fe88611d07038b] |
[0c05bb0be9131cbd3773e063e501f8be8f417fdb] |
[71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe] |
[e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
ZMDB.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
1188152 |
0df7de126b6940fc83fe88611d07038b |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
0c05bb0be9131cbd3773e063e501f8be8f417fdb |
71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe |
e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:01:56 +0000 UTC |
67 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| 8e1e1cc17ababa2e966888d3f24f6433f1ed6321d262827bd46c1d761d6d6955 |
[68a16bd60756fe54a9918f9f, 68a2149cb58debea69d7c749, 68a2bd5ff793a9057f329c05, 68a3663261f8067c48423eb6, 68a40efceddb3a9f1a71a5ff, 68a4b7cd36bc5d38057e2364] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zEventTracker.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[74bc3a324486e7932736ad47214c0260] |
[075fca7b2ec409d0fc70c07c24e2df41fd84890a] |
[05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd] |
[fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zEventTracker.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
226104 |
74bc3a324486e7932736ad47214c0260 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
075fca7b2ec409d0fc70c07c24e2df41fd84890a |
05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd |
fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:42 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 98a95506abccaa35c07debc753da55a30e02cdb9ebf9bf1c4cb2c893db23c09e |
[68a50bca7779aa65cf4b6098] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\MarquetteA5_5_3_10_3.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[PHILIPS FRANCE COMMERCIAL SAS] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:41:53Z] |
[0626022f937e6547de857658b88f7e30] |
[a320f0c9212d7d0249b75c3c1c0a5a7708f0e224] |
[f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84] |
[67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
MarquetteA5_5_3_10_3.msi |
C:\Users\CA_gs10109\Downloads\ |
|
3076096 |
0626022f937e6547de857658b88f7e30 |
|
|
PHILIPS FRANCE COMMERCIAL SAS |
2025-08-19 23:41:50 +0000 UTC |
2025-08-19 23:41:52 +0000 UTC |
a320f0c9212d7d0249b75c3c1c0a5a7708f0e224 |
f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84 |
67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc |
2025-08-19 23:42:02 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 9bd06859f2cfb88267330b32599fa526ab2549b8ea71c724e57f6d7378a5d416 |
[68a16bd60756fe54a9918f9c, 68a2149cb58debea69d7c747, 68a2bd5ff793a9057f329c02, 68a3663261f8067c48423eb5, 68a40efceddb3a9f1a71a5fe, 68a4b7cd36bc5d38057e2363] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zPTApp.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[58b22b0d320b83af6d80cff0f993ee31] |
[c0478b771792203787592fe5485a5face9f4eb9c] |
[30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069] |
[8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zPTApp.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
8505656 |
58b22b0d320b83af6d80cff0f993ee31 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:38 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
c0478b771792203787592fe5485a5face9f4eb9c |
30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069 |
8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-06-12 09:15:00 +0000 UTC |
68 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| 99f5ef22213d7e971d8bc8b5484f3e933cf66bf37b94e8d5aa5acf5e2220ca5a |
[68a48674c4cb2500be69260c, 68a48674c4cb2500be692622] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Hosting.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[54fea61134ad099f7ca3485319f3c4de] |
[b4dc1558d037e14add30d135864a478c444ca0c7] |
[db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3] |
[48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Extensions.Hosting.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Extensions.Hosting |
40200 |
54fea61134ad099f7ca3485319f3c4de |
Serilog.Extensions.Hosting |
4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd |
Stryker Corporation |
2021-11-09 03:00:30 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
b4dc1558d037e14add30d135864a478c444ca0c7 |
db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3 |
48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53 |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a11bb160641b9f5e4b916fe8c1332a7daea7cb5bec0ff20aca1ed56cd38403c9 |
[68a25fb2e970d941642e7ede, 68a25fb2e970d941642e7eeb, 68a3b2cf09045b56b2a707b6, 68a3b2cf09045b56b2a707c3, 68a502e12ae1a61fbf4caf14, 68a502e12ae1a61fbf4caf21] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\typealiases.ps1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z] |
[6edb4820eefbf4bf8f34890da9a4df9a] |
[d8b1ce8e599da18ebf86d4082cfd62d30a68f185] |
[e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712] |
[fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
typealiases.ps1 |
C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\ |
|
13502 |
6edb4820eefbf4bf8f34890da9a4df9a |
|
|
dbatools |
2024-03-28 19:42:23 +0000 UTC |
2024-03-16 13:33:48 +0000 UTC |
d8b1ce8e599da18ebf86d4082cfd62d30a68f185 |
e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712 |
fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d |
2025-08-08 23:00:16 +0000 UTC |
None |
None |
2024-09-24 17:17:25 +0000 UTC |
63 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-08 23:01:52.488 +0000 UTC |
| a4a5a9bd80cb73fd325ee15e645a860069e36ff5c05c932e2efd9626bee05efe |
[68a25fb2e970d941642e7edc, 68a25fb2e970d941642e7ee9, 68a3b2cf09045b56b2a707b4, 68a3b2cf09045b56b2a707c1, 68a502e12ae1a61fbf4caf12, 68a502e12ae1a61fbf4caf1f] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\dbatools.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z] |
[cbadc5b980f5f88524209de74cb9d288] |
[841515e5cc99849bb746688968e5a2f9b2800d69] |
[dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a] |
[d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
dbatools.psm1 |
C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\ |
|
51056 |
cbadc5b980f5f88524209de74cb9d288 |
|
|
dbatools |
2024-03-28 19:42:27 +0000 UTC |
2024-03-16 13:34:02 +0000 UTC |
841515e5cc99849bb746688968e5a2f9b2800d69 |
dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a |
d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9 |
2025-08-08 23:00:16 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a6cd66e10949aed9399a361660c3a31728d676132440d32d9b7edb1a005f580f |
[68a51e96c8556d85247b1372] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe] |
[Servers] |
[Servers Audit] |
[v2284] |
["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe" /COMPUTER:localhost] |
[PHILIPS FRANCE COMMERCIAL SAS] |
[C:\Windows\explorer.exe] |
[C:\Windows\System32\userinit.exe] |
[2025-08-20T01:02:09Z] |
[99df7d512c46663d311ff21b6a397a7c] |
[fd2dbd2766b4a205081e88640035ed1ad5ce7781] |
[01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab] |
[9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
DCAdmin.exe |
C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\ |
DCAdmin Module |
2647776 |
99df7d512c46663d311ff21b6a397a7c |
DataCaptor |
11.8.1.345 |
PHILIPS FRANCE COMMERCIAL SAS |
2024-11-12 22:03:52 +0000 UTC |
2025-08-20 01:01:22 +0000 UTC |
fd2dbd2766b4a205081e88640035ed1ad5ce7781 |
01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab |
9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f |
2025-08-20 01:02:14 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a03926359987dde8bfa14905c2e91b0dcb912cc1c5c4e5cc4e08a3f410a51975 |
[68a48674c4cb2500be69261b, 68a48674c4cb2500be692631] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\log4net.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z] |
[3b9e164c32b6dde7701c518e1c515196] |
[0b7e5cedc915c5952cdaf018df7f46d91cabe893] |
[eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684] |
[8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
log4net.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Apache log4net for .NET Standard 2.0 |
270048 |
3b9e164c32b6dde7701c518e1c515196 |
log4net |
2.0.15.0-.NET Standard 2.0 |
Stryker Corporation |
2022-07-25 12:40:06 +0000 UTC |
2024-02-15 18:01:58 +0000 UTC |
0b7e5cedc915c5952cdaf018df7f46d91cabe893 |
eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684 |
8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| a89d98e45048ab6c95c9bcd763368cdba07ce23cccae4c0397a21465a704f696 |
[68a16bd60756fe54a9918f9d, 68a2149cb58debea69d7c748, 68a2bd5ff793a9057f329c03, 68a3663261f8067c48423eb8, 68a40efceddb3a9f1a71a600, 68a4b7cd36bc5d38057e2365] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\XmppDll.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[e9993b2952f59b356b8d698593ee395c] |
[918396277f3549bc9b03d29c6e39a4daf0493ef0] |
[8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a] |
[9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
XmppDll.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
gloox Jabber/XMPP library |
2290488 |
e9993b2952f59b356b8d698593ee395c |
|
1.0.11 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
918396277f3549bc9b03d29c6e39a4daf0493ef0 |
8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a |
9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:01:43 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| ad7c0b2129710ddf993b52f160a9045d9ba52aadc123df4370360ea7f70b3152 |
[68a16bd60756fe54a9918f9e, 68a2149cb58debea69d7c74a, 68a2bd5ff793a9057f329c04, 68a3663261f8067c48423eb7, 68a40efceddb3a9f1a71a601, 68a4b7cd36bc5d38057e2366] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMsgAppCommon.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[8ebe28011c96596c46449bb1073ef46e] |
[14337012084411cbc0624f820c9fea5072ca6c1b] |
[a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421] |
[66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zMsgAppCommon.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
10472248 |
8ebe28011c96596c46449bb1073ef46e |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
14337012084411cbc0624f820c9fea5072ca6c1b |
a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421 |
66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-06-12 09:17:11 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| b07f775760a7fe4a33f58c4db6d53037c94625def8cfde62ebe8b7971c53c987 |
[68a48674c4cb2500be69260f, 68a48674c4cb2500be692625] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Async.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[8ad6b881cc4d5180f4d24828d54d78ae] |
[c86a4f3444888a9c12414814d12e71c3e6bedbe6] |
[f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3] |
[2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Sinks.Async.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Sinks.Async |
21240 |
8ad6b881cc4d5180f4d24828d54d78ae |
Serilog.Sinks.Async |
1.5.0 |
Stryker Corporation |
2021-06-25 13:05:08 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
c86a4f3444888a9c12414814d12e71c3e6bedbe6 |
f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3 |
2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b22a5bd87191cfbc9e6edb3e9a804f120c7da8eb995d56d8c6aeff8ad3da2d86 |
[68a5c90aab7f84c2d5a0971d] |
[2] |
[SVC_SL_RedSailTech] |
[i-nQS1mgtn] |
[WVUHS] |
[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe] |
[Servers] |
[Servers Audit] |
[v2287.880] |
["C:\Users\SVC_SL~1\AppData\Local\Temp\RarSFX0\Package.exe" ] |
[Lexmark International, Inc.] |
[C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe] |
[C:\Windows\explorer.exe] |
[2025-08-20T13:09:26Z] |
[5c64c62f044ea1fae6d3adc7f4be5688] |
[f86c5dea9f6931b69fc490414635ae398efe5229] |
[e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5] |
[0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca] |
[172.17.20.104] |
[172.17.20.104] |
1 |
Success |
Package.exe |
C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\ |
Package Selection Options |
3653920 |
5c64c62f044ea1fae6d3adc7f4be5688 |
|
1.0.0.1 |
Lexmark International, Inc. |
2025-08-20 13:09:26 +0000 UTC |
2017-08-16 14:18:52 +0000 UTC |
f86c5dea9f6931b69fc490414635ae398efe5229 |
e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5 |
0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca |
2025-08-20 13:09:30 +0000 UTC |
None |
None |
2024-08-19 23:25:52 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-20 13:10:54.011 +0000 UTC |
| b5c4840198ec973d3f940a1a54639be4eb24bb6a8ebe6519dd1810ea2d437f98 |
[68a2d482450a223d0231431b, 68a57528577ea16290f09fee] |
[2] |
[1801910989] |
[UH-LIBRX] |
[UH-LIBRX] |
[C:\Program Files\Siber Systems\GoodSync\gsync.exe] |
[Servers] |
[Servers Audit] |
[v2248, v2284.877] |
["C:\Program Files\Siber Systems\GoodSync\gsync.exe" /runner-service=(user)] |
[Siber Systems] |
[C:\Windows\System32\services.exe] |
[C:\Windows\System32\wininit.exe] |
[2025-08-18T07:00:38Z, 2025-08-20T07:00:41Z] |
[6d0db0f2170f8b674f059587ed5d89bc] |
[bfd4582ba3e95eec900600e9a60cf57d0ca9dcec] |
[9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737] |
[b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c] |
[10.101.101.35] |
[10.101.101.35] |
1 |
Success |
gsync.exe |
C:\Program Files\Siber Systems\GoodSync\ |
Command Line GoodSync |
8298240 |
6d0db0f2170f8b674f059587ed5d89bc |
GoodSync |
10.20.9.9 |
Siber Systems |
2022-11-21 14:59:15 +0000 UTC |
2022-11-21 14:59:16 +0000 UTC |
bfd4582ba3e95eec900600e9a60cf57d0ca9dcec |
9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737 |
b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c |
2025-07-18 07:00:49 +0000 UTC |
None |
None |
2023-07-31 00:16:36 +0000 UTC |
68 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-07-18 07:05:17.975 +0000 UTC |
| bddc530b9300a27f70c238d542f107dd3fe56831bf9c2b46fc5f2490358bedee |
[68a50cecb4890326e80ca020] |
[2] |
[CA_gs10109] |
[i-ncapsule12] |
[WVUHS] |
[C:\Users\CA_gs10109\Downloads\MaquetC_5_4_9_24.msi] |
[Servers] |
[Servers Audit] |
[v2284] |
[] |
[PHILIPS FRANCE COMMERCIAL SAS] |
[C:\Windows\System32\msiexec.exe] |
[C:\Program Files\Google\Chrome\Application\chrome.exe] |
[2025-08-19T23:46:44Z] |
[0c379659877fcb46c2b1ed42e5f08649] |
[8b35c794af260f72bfaa4b9eb93a634e911231fb] |
[bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36] |
[9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
MaquetC_5_4_9_24.msi |
C:\Users\CA_gs10109\Downloads\ |
|
2547712 |
0c379659877fcb46c2b1ed42e5f08649 |
|
|
PHILIPS FRANCE COMMERCIAL SAS |
2025-08-19 23:46:40 +0000 UTC |
2025-08-19 23:46:42 +0000 UTC |
8b35c794af260f72bfaa4b9eb93a634e911231fb |
bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36 |
9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a |
2025-08-19 23:46:52 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| b9589642180b32d9a18ca52398fb0d53893e3f8a35611ce3f854492fa0349871 |
[68a48674c4cb2500be692617, 68a48674c4cb2500be69262d] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.ServiceAgents.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[b49ebe2365863c63c5fa3d96eb031469] |
[b3fb3dd5136ae2fe56a4cd7646029f67dd46980d] |
[3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a] |
[1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
SEWSI.ServiceAgents.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
SEWSI.ServiceAgents |
61176 |
b49ebe2365863c63c5fa3d96eb031469 |
Connected Hospital |
1.0.0.0 |
Stryker Corporation |
2023-03-16 10:22:36 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
b3fb3dd5136ae2fe56a4cd7646029f67dd46980d |
3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a |
1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c2ed1c813c3e9df1cce05bdae49d2c20edf56502f916ca8c55d8ac08f1b7f682 |
[68a16bd60756fe54a9918f8b, 68a2149cb58debea69d7c736, 68a2bd5ff793a9057f329bf2, 68a3663261f8067c48423ea6, 68a40efceddb3a9f1a71a5ed, 68a4b7cd36bc5d38057e2354] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\DuiLib.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[46daed87222362c75d0f93c9ceebecee] |
[5d2aa57dbda3c6914acd7024280a2cb71a290cc5] |
[2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14] |
[e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
DuiLib.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
2146104 |
46daed87222362c75d0f93c9ceebecee |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
5d2aa57dbda3c6914acd7024280a2cb71a290cc5 |
2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14 |
e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:01:10 +0000 UTC |
71 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| ba81e8ceff38640c2aef358ea04002dbdd2231c3c987001c15b6fc73ba75466d |
[68a25fb2e970d941642e7ed9, 68a25fb2e970d941642e7ee6, 68a3b2cf09045b56b2a707b1, 68a3b2cf09045b56b2a707be, 68a502e12ae1a61fbf4caf0f, 68a502e12ae1a61fbf4caf1c] |
[2] |
[SQLAgent$KRONOS] |
[i-nSQL] |
[NT SERVICE] |
[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\dbatools.library.psm1] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[] |
[dbatools] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] |
[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z] |
[5654ec4ceddb9b01a8f94166ba14091d] |
[5cfeb2b421fd0881a3ec31af07e3a285404d1fb4] |
[b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb] |
[2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6] |
[172.17.252.12] |
[172.17.252.12] |
1 |
Success |
dbatools.library.psm1 |
C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\ |
|
18768 |
5654ec4ceddb9b01a8f94166ba14091d |
|
|
dbatools |
2024-02-21 21:01:13 +0000 UTC |
2023-09-21 14:59:12 +0000 UTC |
5cfeb2b421fd0881a3ec31af07e3a285404d1fb4 |
b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb |
2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6 |
2025-08-08 23:00:06 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| bac8eb3f47e2f86cc0c63b0e0ddf4d59f7f484f12e636d3dc485555944a9fc44 |
[68a16bd60756fe54a9918f90, 68a2149cb58debea69d7c73b, 68a2bd5ff793a9057f329bf6, 68a3663261f8067c48423ea9, 68a40efceddb3a9f1a71a5f1, 68a4b7cd36bc5d38057e2356] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTask.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[cba32f4fc85fa047780b98586445d649] |
[bf00992713ad9d38e3090bf52e8b1e82b1647fdb] |
[f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc] |
[79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
ZoomTask.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
389432 |
cba32f4fc85fa047780b98586445d649 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
bf00992713ad9d38e3090bf52e8b1e82b1647fdb |
f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc |
79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:01:42 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| c596c3c0daaf9055213284e42bd337e3b6754890efe1c480f0e7731ad4060af5 |
[68a16bd60756fe54a9918fa7, 68a2149cb58debea69d7c752, 68a2bd5ff793a9057f329c0d, 68a3663261f8067c48423ec0, 68a40efceddb3a9f1a71a609, 68a4b7cd36bc5d38057e236e] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\CmmBrowserEngine.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] |
[097f29d6fcdb18a270a67a77726f02e0] |
[572c07086245d07726fa885459d62fe77733dfbc] |
[0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d] |
[f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
CmmBrowserEngine.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
199480 |
097f29d6fcdb18a270a67a77726f02e0 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
572c07086245d07726fa885459d62fe77733dfbc |
0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d |
f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:02:28 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| bf941354d209769734c601d7d725941fb53ce6cfeb77bac36709c89ec9bc8b50 |
[68a4e8fbf38f9e1f8274ab4c] |
[2] |
[SYSTEM] |
[i-ncapsule12] |
[NT AUTHORITY] |
[C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe] |
[Servers] |
[Servers Audit] |
[v2283] |
["C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe" req -new -x509 -extensions rootca_cert -passout pass:V]7H:]Vp#>3l:&mj/I#F -keyout "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.key" -out "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.crt" -days 3653 -config "C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\Root.cnf"] |
[Open Source Developer, François PIETTE] |
[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] |
[C:\Windows\SysWOW64\msiexec.exe] |
[2025-08-19T21:13:27Z] |
[36a5d769ada5511b269cd7f028f80b36] |
[568b532bef2967af9fef30d860972fc5b67827e4] |
[11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d] |
[c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
openssl.exe |
C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\ |
OpenSSL application |
732016 |
36a5d769ada5511b269cd7f028f80b36 |
The OpenSSL Toolkit |
1.1.1b |
Open Source Developer, François PIETTE |
2019-02-27 14:53:24 +0000 UTC |
2019-02-27 14:53:24 +0000 UTC |
568b532bef2967af9fef30d860972fc5b67827e4 |
11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d |
c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda |
2025-08-19 21:13:31 +0000 UTC |
None |
None |
2019-05-07 09:32:58 +0000 UTC |
69 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-19 21:16:02.876 +0000 UTC |
| c9963a3f8abf6fedc8f983a9655a387d67c752bd59b0d16fd6fc2396b4b4ca67 |
[68a4e8a1ad898641af98fd99, 68a4e9b3061a87dd106e473f, 68a4f315247c4b5c9ccb9235, 68a4fcd0011d94a251a4ef35, 68a4fcd0011d94a251a4ef3f] |
[2] |
[CA_gs10109, ReevesJoe] |
[i-ncapsule12] |
[WVUHS] |
[C:\Program Files\TAP-Windows\bin\tapinstall.exe] |
[Servers] |
[Servers Audit] |
[v2283, v2284.877, v2284] |
["C:\Program Files\TAP-Windows\bin\tapinstall.exe" hwids tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" install "C:\Program Files\TAP-Windows\driver\OemVista.inf" tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" remove tap0901] |
[OpenVPN Technologies, Inc.] |
[C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe] |
[C:\Windows\Installer\MSIED82.tmp, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Windows\Installer\MSI50B.tmp, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe] |
[2025-08-19T21:11:56Z, 2025-08-19T21:11:57Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z] |
[d10f74d86cd350732657f542df533f82] |
[c54074f8f162a780819175e7169c43f6706ad46c] |
[0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855] |
[0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e] |
[172.17.23.18] |
[172.17.23.18] |
1 |
Success |
tapinstall.exe |
C:\Program Files\TAP-Windows\bin\ |
Windows Setup API |
92304 |
d10f74d86cd350732657f542df533f82 |
Windows (R) Win 7 DDK driver |
6.1.7600.16385 |
OpenVPN Technologies, Inc. |
2016-04-21 11:34:12 +0000 UTC |
2016-04-21 11:34:12 +0000 UTC |
c54074f8f162a780819175e7169c43f6706ad46c |
0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855 |
0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e |
2025-08-19 21:12:01 +0000 UTC |
None |
None |
2025-08-18 12:31:35 +0000 UTC |
73 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-19 21:16:02.876 +0000 UTC |
| c9cc6face476f8d775daa32503e747868b65a73ee9eb306cf78c86c767ad09bb |
[68a5e788692da313f892a122, 68a5f7f47c4424bb71e0a54b, 68a614164c5f9631798f265a] |
[2] |
[SYSTEM] |
[u-nviewpoint01] |
[NT AUTHORITY] |
[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\cp.dll] |
[Servers] |
[Servers Audit] |
[v2299.891, v2306.895, v2307.897] |
[] |
[Bomgar Corporation] |
[C:\Windows\System32\LogonUI.exe] |
[C:\Windows\System32\winlogon.exe] |
[2025-08-20T15:09:54Z, 2025-08-20T16:19:41Z, 2025-08-20T18:26:45Z] |
[8d45b8ff739f914564f869bb37d05386] |
[558f84d716b9a8e3de2ef25cef42c936315ba190] |
[8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293] |
[d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39] |
[172.25.17.210] |
[172.25.17.210] |
1 |
Success |
cp.dll |
C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\ |
ACH Credential Provider |
1185872 |
8d45b8ff739f914564f869bb37d05386 |
Automated Credential Handling |
24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) |
Bomgar Corporation |
2025-07-23 17:47:09 +0000 UTC |
2025-07-23 17:47:09 +0000 UTC |
558f84d716b9a8e3de2ef25cef42c936315ba190 |
8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293 |
d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39 |
2025-07-23 17:47:21 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c9fc184e1ca62fe686fbd38a18904c7d84f091a080e009089e170d1b30b664f0 |
[68a48674c4cb2500be692633] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerUI.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:15Z] |
[4d6da26c03021f4618d9339970734fcf] |
[1f147bd82cbdc20c0f3edf7844e0096e65201b69] |
[98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0] |
[4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Swashbuckle.AspNetCore.SwaggerUI.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Swashbuckle.AspNetCore.SwaggerUI |
3265296 |
4d6da26c03021f4618d9339970734fcf |
Swashbuckle.AspNetCore.SwaggerUI |
6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 |
Stryker Corporation |
2023-01-11 11:49:02 +0000 UTC |
2024-02-15 18:02:07 +0000 UTC |
1f147bd82cbdc20c0f3edf7844e0096e65201b69 |
98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0 |
4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660 |
2025-07-15 14:07:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| c3796735f397c34b8190c04151071a3700e9356214c940fc7a16781c1678c998 |
[68a16bd60756fe54a9918f9b, 68a2149cb58debea69d7c746, 68a2bd5ff793a9057f329c01, 68a3663261f8067c48423eb4, 68a40efceddb3a9f1a71a5fd, 68a4b7cd36bc5d38057e2362] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWinRes.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[ea160d8a356d92ab1ce2cef57b69cd5a] |
[4e49b884b2592720404e91cdd2d526af82c02c6b] |
[77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56] |
[917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zWinRes.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
10790712 |
ea160d8a356d92ab1ce2cef57b69cd5a |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:38 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
4e49b884b2592720404e91cdd2d526af82c02c6b |
77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56 |
917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-06-12 09:14:39 +0000 UTC |
51 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| cd34acbad5993e309d24cffa925af6e5cb8e08a0c5b4a401dc8df4d306212be4 |
[68a16bd60756fe54a9918f9a, 68a2149cb58debea69d7c744, 68a2bd5ff793a9057f329bff, 68a3663261f8067c48423eb1, 68a40efceddb3a9f1a71a5fc, 68a4b7cd36bc5d38057e235f] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zContext.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[f58a3055af8d49f2bed351e9eeb27d79] |
[a6df905855b434565f04c548ba5f7fbc22452446] |
[e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6] |
[34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zContext.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
53048 |
f58a3055af8d49f2bed351e9eeb27d79 |
Zoom |
1,0,0,0 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
a6df905855b434565f04c548ba5f7fbc22452446 |
e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6 |
34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 05:58:23 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| cd79a7570ed7d959919f8e7ceee95df75e07349692c2bbab9929ab608099ff36 |
[68a4c29edcf2a23051e711be] |
[2] |
[lindseye] |
[i-HNOCnoc] |
[WVUHS] |
[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\Interop.Taskschd.dll] |
[Servers] |
[Servers Audit] |
[v2283.876] |
[] |
[Solarwinds Worldwide, LLC] |
[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ScpServerTray.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T18:21:29Z] |
[fec0d051646249d6e0b962e8af2bf997] |
[d50af831c045c754b457eee80d0b4087d8a91d9a] |
[e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d] |
[35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b] |
[172.18.0.16] |
[172.18.0.16] |
1 |
Success |
Interop.Taskschd.dll |
C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ |
|
61272 |
fec0d051646249d6e0b962e8af2bf997 |
|
|
Solarwinds Worldwide, LLC |
2023-08-07 15:09:26 +0000 UTC |
2023-08-07 15:09:26 +0000 UTC |
d50af831c045c754b457eee80d0b4087d8a91d9a |
e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d |
35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b |
2025-05-20 13:40:01 +0000 UTC |
None |
None |
2023-11-24 14:44:41 +0000 UTC |
71 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-05-20 13:41:46.619 +0000 UTC |
| c7d8756c30a879fe1f41d094bac39382e5437a03d911dcbcc4b903d3eb2e7373 |
[68a48674c4cb2500be692615, 68a48674c4cb2500be69262b] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.BusinessLogic.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] |
[d27f531fe42e94037f1d13cbfb5e81ed] |
[0972769cb0b0517846d9181e89115cacd8f530b9] |
[79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86] |
[bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
StrykerIOTAPI.BusinessLogic.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
StrykerIOTAPI.BusinessLogic |
39176 |
d27f531fe42e94037f1d13cbfb5e81ed |
StrykerIOTAPI.BusinessLogic |
1.0.0 |
Stryker Corporation |
2023-03-16 10:22:38 +0000 UTC |
2024-02-15 18:02:05 +0000 UTC |
0972769cb0b0517846d9181e89115cacd8f530b9 |
79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86 |
bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d3c63e150036f10e73e8cb6478091077532ea4eef2720b551a7be14e35ae9c96 |
[68a48674c4cb2500be69260b, 68a48674c4cb2500be692621] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.AspNetCore.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[e5a12ea408c1bb924baba6710f8a210a] |
[952925b6de0a96d202f1f965ab347745228e2973] |
[1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94] |
[bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.AspNetCore.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.AspNetCore |
27896 |
e5a12ea408c1bb924baba6710f8a210a |
Serilog.AspNetCore |
5.0.0 |
Stryker Corporation |
2022-02-16 03:02:56 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
952925b6de0a96d202f1f965ab347745228e2973 |
1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94 |
bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526 |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6 |
[68a5e788692da313f892a11f] |
[2] |
[SYSTEM] |
[u-nviewpoint01] |
[NT AUTHORITY] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe] |
[Servers] |
[Servers Audit] |
[v2299.891] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90] |
[Bomgar Corporation] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe] |
[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe] |
[2025-08-20T15:09:52Z] |
[b7948c5b27f648de74db6918b1ecd775] |
[6f077c46d82ba1b5b44d943eb167e0e99f92464f] |
[289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5] |
[8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b] |
[172.25.17.210] |
[172.25.17.210] |
1 |
Success |
launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe |
C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\ |
Remote Support Customer Client |
6610128 |
b7948c5b27f648de74db6918b1ecd775 |
Remote Support Customer Client |
24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) |
Bomgar Corporation |
2025-07-23 17:47:07 +0000 UTC |
2025-07-23 17:47:07 +0000 UTC |
6f077c46d82ba1b5b44d943eb167e0e99f92464f |
289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5 |
8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b |
2025-07-23 17:47:11 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| de70a46df02c58913df13c7654d2b50ebdcfeb522118e089e9aa8d6e6ef1e166 |
[68a16bd60756fe54a9918f96, 68a2149cb58debea69d7c741, 68a2bd5ff793a9057f329bf7, 68a3663261f8067c48423eb2, 68a40efceddb3a9f1a71a5f6, 68a4b7cd36bc5d38057e2360] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libcrypto-3-zm.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[a4f9cbff85279638dde688059cf9b9aa] |
[0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19] |
[84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919] |
[8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
libcrypto-3-zm.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
OpenSSL library |
5671224 |
a4f9cbff85279638dde688059cf9b9aa |
The OpenSSL Toolkit |
3.3.3 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19 |
84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919 |
8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-06-12 09:14:27 +0000 UTC |
64 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| e2ee86365c2d7a10dc3e77887dcf7ad93c94f5d00128d0d3cb86d3501001a602 |
[68a354fa71d9fa85319f10b7] |
[2] |
[SVC_SL_NewTech] |
[i-nWHLBadge] |
[WVUHS] |
[C:\Program Files\RS2 Technologies\Access It! Universal.NET\SCPWrap64.dll] |
[Servers] |
[Servers Audit] |
[v2259.858] |
[] |
[HID Global Corporation] |
[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe] |
[C:\Windows\explorer.exe] |
[2025-08-18T16:28:49Z] |
[199606fefa62618ab57440cf5e5cd511] |
[3336a6a1aef2da51079da4f3166813bc777dc269] |
[af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470] |
[7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3] |
[172.17.253.114] |
[172.17.253.114] |
1 |
Success |
SCPWrap64.dll |
C:\Program Files\RS2 Technologies\Access It! Universal.NET\ |
SCPWrap |
121752 |
199606fefa62618ab57440cf5e5cd511 |
SCPWrap |
4.7.1.28 |
HID Global Corporation |
2023-03-17 19:52:06 +0000 UTC |
2023-03-17 19:52:06 +0000 UTC |
3336a6a1aef2da51079da4f3166813bc777dc269 |
af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470 |
7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3 |
2025-05-13 05:13:29 +0000 UTC |
None |
None |
2023-05-15 12:39:24 +0000 UTC |
70 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-05-13 05:20:32.095 +0000 UTC |
| e7c26f470749e005a957ceca6832cec2745e6c227dc8cde71bd07239ddb904f1 |
[68a16bd60756fe54a9918f95, 68a2149cb58debea69d7c73d, 68a2bd5ff793a9057f329bfe, 68a3663261f8067c48423eaa, 68a40efceddb3a9f1a71a5fa, 68a4b7cd36bc5d38057e2358] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zCrashReport64.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[28fae224af5f7dbee89946acea3675f8] |
[768587a2e2a33aa921b8b6cc2f94eca00928d414] |
[d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b] |
[3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zCrashReport64.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Crash Handling Module |
260408 |
28fae224af5f7dbee89946acea3675f8 |
CrashRpt |
1.0.0.2230 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
768587a2e2a33aa921b8b6cc2f94eca00928d414 |
d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b |
3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:00:22 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| eb717bf9e34c43fef95539bdc98c8c54edf0644f618f88734975d128c4818304 |
[68a16bd60756fe54a9918f92, 68a2149cb58debea69d7c73e, 68a2bd5ff793a9057f329bf8, 68a3663261f8067c48423eab, 68a40efceddb3a9f1a71a5f5, 68a4b7cd36bc5d38057e2359] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\util.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[996efd9d4e57041ce02ca6e95a59bda6] |
[ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d] |
[c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a] |
[d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
util.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
467256 |
996efd9d4e57041ce02ca6e95a59bda6 |
Zoom |
1, 0, 2012, 1222 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d |
c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a |
d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 05:59:59 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| eb74c255ef2059b0e4a07ec54eab6d24dd9807c9da0e695f343911b4001b62a8 |
[68a16bd60756fe54a9918fa3, 68a2149cb58debea69d7c74e, 68a2bd5ff793a9057f329c09, 68a3663261f8067c48423ebc, 68a40efceddb3a9f1a71a605, 68a4b7cd36bc5d38057e236a] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zData.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] |
[5507945c8429858e9e88070ce5a42f1e] |
[780c5bab6f9d26a9b0c213f0048ecf231c1404cb] |
[bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a] |
[2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zData.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
3605816 |
5507945c8429858e9e88070ce5a42f1e |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
780c5bab6f9d26a9b0c213f0048ecf231c1404cb |
bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a |
2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:27 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| ede24c40e2a7bb0b0143ac595073abf7055867b9f35425d41dee9d3c8ad546ca |
[68a16bd60756fe54a9918fa4, 68a2149cb58debea69d7c74f, 68a2bd5ff793a9057f329c0a, 68a3663261f8067c48423ebd, 68a40efceddb3a9f1a71a606, 68a4b7cd36bc5d38057e236b] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTelemetry.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] |
[6773863edb1abd984c61ad490a95e2a0] |
[a497082bdb7108c86a21700754553550185474cf] |
[56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67] |
[2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
ZoomTelemetry.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
4784440 |
6773863edb1abd984c61ad490a95e2a0 |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:37 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
a497082bdb7108c86a21700754553550185474cf |
56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67 |
2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48 |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:03:31 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| f1ac711cb8491e226815bb95418502d495f41482bed0240646feb118260cfdbe |
[68a48674c4cb2500be692610, 68a48674c4cb2500be692626] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Debug.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] |
[e7e39224cd91face931f14064a638698] |
[2e2c1e01a10fdddc7d9a842413484e407191f92e] |
[af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb] |
[0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Sinks.Debug.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Sinks.Debug |
19192 |
e7e39224cd91face931f14064a638698 |
Serilog.Sinks.Debug |
2.0.0-master-68cc513 |
Stryker Corporation |
2021-02-14 12:47:26 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
2e2c1e01a10fdddc7d9a842413484e407191f92e |
af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb |
0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f389e16e78bc34be5aa9bd3ce9fd6539ffc61387d71c29f8c5cb4fa989727f6d |
[68a16bd60756fe54a9918fa0, 68a2149cb58debea69d7c74b, 68a2bd5ff793a9057f329c06, 68a3663261f8067c48423eb9, 68a40efceddb3a9f1a71a602, 68a4b7cd36bc5d38057e2367] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\LibphoneWrapper.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] |
[6b15ab371446e9308f6c7760dac4485c] |
[230e1cdc4416240c11e78e0f54b50e441858e2cb] |
[f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9] |
[a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
LibphoneWrapper.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
846136 |
6b15ab371446e9308f6c7760dac4485c |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
230e1cdc4416240c11e78e0f54b50e441858e2cb |
f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9 |
a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 06:00:27 +0000 UTC |
72 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 14:43:31.3 +0000 UTC |
| efe3198f94732357b04ee6a7e13a5c0914d0db372c7b8889bff1ea2a925da1b8 |
[68a16bd60756fe54a9918f8f, 68a2149cb58debea69d7c73a, 68a2bd5ff793a9057f329bf5, 68a3663261f8067c48423ea8, 68a40efceddb3a9f1a71a5f2, 68a4b7cd36bc5d38057e2357] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cmmbiz.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] |
[41a96aedf2095d6e5e88c39173a010ac] |
[e97e89687d29d309d2b56b2487276352e60ba184] |
[f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f] |
[f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
cmmbiz.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
786232 |
41a96aedf2095d6e5e88c39173a010ac |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:36 +0000 UTC |
2025-07-07 01:28:18 +0000 UTC |
e97e89687d29d309d2b56b2487276352e60ba184 |
f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f |
f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3 |
2025-07-15 17:40:19 +0000 UTC |
None |
None |
2025-07-03 06:00:03 +0000 UTC |
71 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-15 11:38:01.347 +0000 UTC |
| f01539ab85e7769cbf9e046fc9f87e3c6abd74bebff765b77a9c48972f0da67f |
[68a48674c4cb2500be692609, 68a48674c4cb2500be69261f] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Console.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] |
[f2c3352f41741807403c460ed4759bb7] |
[a23e5c02ab076c8c8dab1a2bd2c7306541de034e] |
[57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592] |
[7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Serilog.Sinks.Console.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Serilog.Sinks.Console |
46336 |
f2c3352f41741807403c460ed4759bb7 |
Serilog.Sinks.Console |
4.0.1-main-37f02f5 |
Stryker Corporation |
2021-11-19 05:04:50 +0000 UTC |
2024-02-15 18:02:04 +0000 UTC |
a23e5c02ab076c8c8dab1a2bd2c7306541de034e |
57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592 |
7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8 |
2025-07-15 14:07:33 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| fa86ea9326765d5be075d1129e08150246ac0bd2f394d97c39cafae921f0e1ff |
[68a16bd60756fe54a9918fab, 68a2149cb58debea69d7c756, 68a2bd5ff793a9057f329c11, 68a3663261f8067c48423ec4, 68a40efceddb3a9f1a71a60d, 68a4b7cd36bc5d38057e2372] |
[2] |
[Teknicor] |
[Teknicor] |
[PCH-DOMAIN] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zTelemetryBiz.dll] |
[Servers] |
[Servers Audit] |
[v2248.849, v2264.862, v2272.867, v2282.875] |
[] |
[Zoom Video Communications, Inc.] |
[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:03Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] |
[74980fb5a35295d4c1aace7f401a721a] |
[0dfbd25d4b0994b137a2f914752804d5edba75b3] |
[bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c] |
[dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f] |
[10.20.20.68] |
[10.20.20.68] |
1 |
Success |
zTelemetryBiz.dll |
C:\Users\teknicor\AppData\Roaming\Zoom\bin\ |
Zoom |
134968 |
74980fb5a35295d4c1aace7f401a721a |
Zoom |
6,4,12,64384 |
Zoom Video Communications, Inc. |
2025-07-07 01:28:38 +0000 UTC |
2025-07-07 01:28:19 +0000 UTC |
0dfbd25d4b0994b137a2f914752804d5edba75b3 |
bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c |
dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f |
2025-07-15 17:40:29 +0000 UTC |
None |
None |
2025-07-03 05:59:41 +0000 UTC |
71 |
0 |
KNOWN |
0 |
Signature Verified (DigiCert) |
2025-07-14 22:31:10.091 +0000 UTC |
| f39a93d4ec3f32e339b3a6cbf96208f8e057ee7483ae8d857b0a03848aacd045 |
[68a48674c4cb2500be69261a, 68a48674c4cb2500be692630] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.Swagger.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z] |
[ec116545a1a3e9c526cab69658fe0500] |
[754ebdc6c68455197432fc9cc8617ca28c227372] |
[3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d] |
[8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Swashbuckle.AspNetCore.Swagger.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Swashbuckle.AspNetCore.Swagger |
27408 |
ec116545a1a3e9c526cab69658fe0500 |
Swashbuckle.AspNetCore.Swagger |
6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 |
Stryker Corporation |
2023-01-11 11:48:20 +0000 UTC |
2024-02-15 18:02:06 +0000 UTC |
754ebdc6c68455197432fc9cc8617ca28c227372 |
3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d |
8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6 |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| f40681b66d49369219f31f15fe7a0e73a787651ce357f5e86e2d6bddb49c0c97 |
[68a48674c4cb2500be69261c, 68a48674c4cb2500be692632] |
[2] |
[NETWORK SERVICE, SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\Polly.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:03:22Z, 2025-08-19T14:05:04Z] |
[1d281597aef8d59107117c53584acc44] |
[38e2d5449d89bb84e313d080e7969a5261a459a6] |
[a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db] |
[3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
Polly.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
Polly |
287456 |
1d281597aef8d59107117c53584acc44 |
Polly |
7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d |
Stryker Corporation |
2022-01-17 18:25:08 +0000 UTC |
2024-02-15 18:02:03 +0000 UTC |
38e2d5449d89bb84e313d080e7969a5261a459a6 |
a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db |
3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a |
2025-07-15 14:07:43 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |
| 020f21b1a2944cc57671cc061c101cab4786e324fd6ccc4003184002a4b8f5b3 |
[68a28bda3bdcd0703f76f644, 68a3dfd9dd64bcf44b32b6de, 68a533cd7c33c0fb7b88c886] |
[2] |
[xpressions] |
[vm-vmail] |
[WVUH] |
[C:\Users\xpressions\SnmpTrapGen.exe] |
[Servers] |
[Servers Audit] |
[v2248.849, v2272.867, v2284.877] |
[C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755482987009, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755569859435, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755656891824] |
[SnmpSoft Company (Invalid Certificate Chain)] |
[C:\Windows\System32\cmd.exe] |
[C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe] |
[2025-08-18T02:10:02Z, 2025-08-19T02:17:54Z, 2025-08-20T02:28:27Z] |
[14a8db10bf75b483c14cd1a649fffbf1] |
[4de404c9b6058e7d67cd437b96c0eb4e553dbfdd] |
[5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5] |
[97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a] |
[172.17.252.80] |
[172.17.252.80] |
1 |
Success |
SnmpTrapGen.exe |
C:\Users\xpressions\ |
SnmpTrapGen |
154872 |
14a8db10bf75b483c14cd1a649fffbf1 |
SnmpTrapGen |
1.1 |
SnmpSoft Company (Invalid Certificate Chain) |
2025-08-16 02:25:56 +0000 UTC |
2025-08-16 02:25:57 +0000 UTC |
4de404c9b6058e7d67cd437b96c0eb4e553dbfdd |
5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5 |
97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a |
2025-08-16 02:26:14 +0000 UTC |
None |
None |
2024-04-14 04:26:11 +0000 UTC |
65 |
0 |
KNOWN |
0 |
Benign 0.00 |
2025-08-16 02:27:03.497 +0000 UTC |
| 02887edb4e2a570dca14f9262e9c5574ca92cf067895889e6e38691990a61fd3 |
[68a48674c4cb2500be692634] |
[2] |
[SYSTEM] |
[i-niBedW_Prod] |
[NT AUTHORITY] |
[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.Utilities.dll] |
[Servers] |
[Servers Audit] |
[v2273] |
[] |
[Stryker Corporation] |
[C:\Windows\System32\inetsrv\w3wp.exe] |
[C:\Windows\System32\svchost.exe] |
[2025-08-19T14:05:15Z] |
[7eaac1bd4e2e852dee8286407c142ade] |
[a2cd6b02e50e058fd187534faf01d9a321be6ed1] |
[b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8] |
[d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf] |
[172.17.252.226] |
[172.17.252.226] |
1 |
Success |
SEWSI.Utilities.dll |
C:\Stryker\iBed Server Application\Stryker.IOT\ |
SEWSI.Utilities |
28912 |
7eaac1bd4e2e852dee8286407c142ade |
Connected Hospital |
1.0.0.0 |
Stryker Corporation |
2023-03-16 10:22:36 +0000 UTC |
2024-02-15 18:02:05 +0000 UTC |
a2cd6b02e50e058fd187534faf01d9a321be6ed1 |
b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8 |
d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf |
2025-07-15 14:07:53 +0000 UTC |
None |
None |
Never |
N/A |
N/A |
UNKNOWN |
N/A |
N/A |
N/A |